tandasat/HyperPlatform

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1759 stars · 430 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

HyperPlatform is an Intel VT-x based hypervisor for Windows that provides a thin VM-exit filtering platform for research. It lets researchers selectively monitor events such as memory accesses, system register changes, interrupts, and instruction execution, and build custom logic on top.

Use cases

• analyze kernel mode rootkits with hardware-level monitoring
• build a virtual-machine-based intrusion prevention system (VIPS)
• reverse-engineer the Windows kernel
• monitor and hook kernel API calls stealthily with EPT
• detect elevation-of-privilege exploits in the kernel
• observe PatchGuard activity

When to choose

• you need a thin, readable Intel VT-x hypervisor on Windows 7 through 10
• you want to selectively monitor VM-exit events and extend with your own logic
• you prefer a dependency-free, MIT-licensed codebase debuggable with WinDbg and Visual Studio

When to avoid

• you need a production hypervisor with full VM support or multi-OS guest support
• you target AMD CPUs, since only Intel VT-x is supported
• you need actively developed features; the project is in maintenance with infrequent releases

Facets

library · maturity maintenance

security reverse-engineering monitoring developer-tools security reverse-engineering operating-systems developer-tools windows cpp hypervisor intel-vt-x windows-kernel kernel-driver vm-exit-filtering rootkit-analysis ept

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tandasat/HyperPlatform")