{"adoption": {"forks": 273, "observed_at": "2026-08-28T04:04:48.261301+00:00", "stars": 1465}, "canonical_url": "https://ross.abutalabs.com/products/syscalltables", "card": {"archived": false, "artifact_type": "dataset", "description": "Windows NT Syscall tables", "domain": ["operating-systems", "security", "reverse-engineering", "windows"], "enriched": true, "function": ["security", "reverse-engineering", "developer-tools"], "health_score": 88, "homepage": null, "language": "C", "license": "BSD-2-Clause", "license_family": "permissive", "maturity": "active", "member_repos": ["hfiref0x/SyscallTables"], "name": "hfiref0x/SyscallTables", "platform": ["windows", "cpp"], "pushed_at": "2026-07-04T14:37:43+00:00", "repo": "hfiref0x/SyscallTables", "stars": 1465, "tags": ["syscall-table", "ssdt", "win32k", "ntoskrnl", "win64", "windows-internals", "reference-data"], "topics": ["syscall-table", "win64", "win32k", "ssdt"], "urls": [], "use_cases": ["look up syscall numbers for a specific Windows 10 or 11 build", "build a Windows kernel research or hooking tool that needs SSDT indexes", "resolve win32k syscall IDs when writing security research tooling", "compare syscall tables across Windows versions", "find the syscall number for an Nt function on Windows Server 2022"], "what_it_is": "A collection of combined Windows NT syscall tables covering ntoskrnl and win32k service tables across Windows versions from XP x64 through Windows 11 builds. It provides reference data (in C and browsable HTML) mapping syscall numbers for x86-64 Windows kernels.", "when_to_avoid": ["you need 32-bit (x86) syscall tables", "you target non-Windows operating systems", "you need a runtime syscall-resolution library rather than static reference tables"], "when_to_choose": ["you need authoritative syscall number mappings for x86-64 Windows kernels", "you are doing kernel-mode security research, rootkit analysis, or EDR development on Windows", "you want precomputed tables instead of extracting them from ntoskrnl/win32k binaries yourself"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/syscalltables", "repo": "hfiref0x/SyscallTables", "role": "main", "score": 63}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:48.261301+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:35:05.832540+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "762d2762f7dd3784b6f79ee9b701953432917ee3bb8230a3a1ff977febdba732", "fetched_at": "2026-08-28T04:04:48.261301+00:00", "kind": "readme", "missing": false, "url": "https://github.com/hfiref0x/SyscallTables"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 90, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3820, "days_push": 60, "days_rel": 417, "gap_med": null, "n_releases_24m": 1}, "score": 63, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}