JKornev/hidden

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2051 stars · 505 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Windows kernel driver with a usermode library and CLI that can hide processes, files, directories, and registry keys, and protect processes from observation. It is intended for reverse engineering and research tasks such as concealing analysis tools or VM infrastructure on a test machine.

Use cases

• hide files and registry keys from other processes on windows
• hide a process by pid or image name
• protect a process from being killed or inspected
• conceal reverse engineering tools like procmon or wireshark on a test vm
• research windows kernel rootkit techniques
• manage kernel object hiding from a command line

When to choose

• you need a research driver to hide files, registry keys, or processes on windows
• you are studying rootkit-style kernel techniques in a controlled test environment
• you want a CLI and library interface to a hiding driver

When to avoid

• you need a production or signed security product - it requires test signing and has no license
• you want defensive anti-malware or EDR functionality
• you need stable process hiding - it is marked experimental
• you are not comfortable loading kernel drivers on a test machine

Facets

library · maturity maintenance

security reverse-engineering security windows reverse-engineering windows cli kernel-driver rootkit process-hiding registry-hiding file-hiding usermode-interface malware-analysis

Member repositories

For agents

markdown · JSON · MCP: product_card(name="JKornev/hidden")