wincheck rc8.57

download
mirror
Changelog:

• add support of numerous versions of windows 10 insider preview - up to 16193
• add dumping of FilterConnectionPorts
• add support of RFG (and v2 too) 
• add dumping of ntdll!ProtectedPolicies
• add dumping of kernel etw traces (-wmi option)
• add dumping of EPROCESS.WnfContext
• add dumping of WNF kernelmode callbacks (-wnf option)