{"adoption": {"forks": 229, "observed_at": "2026-08-28T04:04:33.157920+00:00", "stars": 1375}, "canonical_url": "https://ross.abutalabs.com/products/ydark", "card": {"archived": false, "artifact_type": "application", "description": "X64内核小工具", "domain": ["security", "reverse-engineering", "windows", "developer-tools"], "enriched": true, "function": ["security", "reverse-engineering", "developer-tools", "gui"], "health_score": 20, "homepage": null, "language": null, "license": null, "license_family": "other", "maturity": "active", "member_repos": ["ClownQq/YDArk"], "name": "ClownQq/YDArk", "platform": ["windows"], "pushed_at": "2024-01-18T05:31:40+00:00", "repo": "ClownQq/YDArk", "stars": 1375, "tags": ["kernel-tools", "rootkit-detection", "system-internals", "x64", "pchunter-alternative", "driver-inspection", "desktop"], "topics": ["pchunter", "win64ast"], "urls": [], "use_cases": ["inspect and kill hidden processes and threads on windows x64", "detect and restore ssdt and kernel hooks", "view and unload kernel drivers including hidden ones", "dump process memory and modules", "enumerate system notify callbacks and dpc timers", "analyze filter drivers and file system hooks", "view open handles and network ports"], "what_it_is": "YDArk is a free x64 Windows kernel inspection tool similar to PCHunter, providing GUI views of processes, threads, handles, drivers, kernel hooks (SSDT, IDT, filters), and network state. It is aimed at learning and system research, with an unsigned VMProtect-packed driver that requires test signing or debug mode.", "when_to_avoid": ["you need a signed production tool or kernel isolation (HVCI) compatibility", "you cannot disable Secure Boot or enable test signing", "you need a license for commercial use"], "when_to_choose": ["you need a PCHunter-style kernel inspector for 64-bit windows", "you are researching rootkits, hooks, or kernel callbacks", "you want to dump drivers or restore patched kernel tables"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/ydark", "repo": "ClownQq/YDArk", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.157920+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:40:32.872625+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "396c4089b8cda0faff1ac4ab59d3933332311fd38f1c780c5c5c8cb87d6eaca9", "fetched_at": "2026-08-28T04:04:33.157920+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ClownQq/YDArk"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2521, "days_push": 958, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}