BeneficialCode
|
32754a4555
|
Fix x86 compilation errors
|
2026-07-25 10:48:46 +08:00 |
|
BeneficialCode
|
2256c8260c
|
No vcpkg when building kernel.
|
2024-09-14 16:48:40 +08:00 |
|
BeneficialCode
|
f8cbf184f0
|
Add the kill process native method.
|
2024-07-07 11:26:12 +08:00 |
|
BeneficialCode
|
1b9773b6f3
|
Update the OB_CALLBACK_CONTEXT_BLOCK define.
|
2024-04-26 20:06:20 +08:00 |
|
BeneficialCode
|
d38dc2bb7a
|
minor fixes
|
2024-03-05 10:50:39 +08:00 |
|
Beneficial
|
fe1c5276be
|
Changed the target version.
|
2023-12-04 14:58:44 +08:00 |
|
Beneficial
|
41cfa78af9
|
Move the inline hook scan in the kernel module view.
|
2023-11-17 09:38:26 +08:00 |
|
BeneficialCode
|
2db014589d
|
Delete the sdv
|
2023-10-29 19:54:11 +08:00 |
|
BeneficialCode
|
5b599e243d
|
Analyze the code.
|
2023-10-29 13:47:46 +08:00 |
|
BeneficialCode
|
2f4b15a446
|
Add the object callback view.
|
2023-10-12 16:12:03 +08:00 |
|
BeneficialCode
|
997a4c3403
|
fixup the error access memory
|
2023-09-09 20:04:42 +08:00 |
|
BeneficialCode
|
1e7f39346f
|
Don't verify the ssl cert.
|
2023-09-09 14:29:36 +08:00 |
|
BeneficialCode
|
777ed451a1
|
fixup the %wZ format faltal error.
|
2023-09-08 15:36:53 +08:00 |
|
BeneficialCode
|
766f0e6485
|
Update the hook function.
|
2023-08-27 00:00:18 +08:00 |
|
BeneficialCode
|
ed7ff58404
|
Hook hash search function.
|
2023-08-24 08:43:30 +08:00 |
|
BeneficialCode
|
fa396262d6
|
Disable driver load by hook.
|
2023-08-23 22:48:44 +08:00 |
|
BeneficialCode
|
ab6d13552b
|
Enhance the explorer view.
|
2023-08-10 14:59:46 +08:00 |
|
BeneficialCode
|
9cb6c297a1
|
On Windows 11, the SystemSessionPoolTagInformation is not a valid information class for the specified object.
|
2023-08-04 15:15:11 +08:00 |
|
BeneficialCode
|
257d5acb83
|
Enhance the pointer check
|
2023-08-03 17:33:30 +08:00 |
|
BeneficialCode
|
b2c3b274f5
|
Add the Explorer view ui.
|
2023-06-14 19:57:16 +08:00 |
|
BeneficialCode
|
ab67a358fe
|
Now it can detect the ntoskrnl inline hook
|
2023-05-31 23:23:20 +08:00 |
|
BeneficialCode
|
da3487e97f
|
Add some kernel inline hook detect code.
|
2023-05-30 15:21:09 +08:00 |
|
BeneficialCode
|
cb3fbee703
|
fixup a fatal bug in khook.
|
2023-05-28 21:39:46 +08:00 |
|
BeneficialCode
|
4456ca136e
|
fixup the version info
|
2023-05-19 07:52:13 +08:00 |
|
BeneficialCode
|
77db89d661
|
update the version info
|
2023-05-19 07:28:15 +08:00 |
|
BeneficialCode
|
48dc5ff02a
|
remove the detour library
|
2023-05-19 07:13:13 +08:00 |
|
BeneficialCode
|
a789366636
|
Support remove and add debugger into the ListView
|
2023-05-14 22:44:29 +08:00 |
|
BeneficialCode
|
116235569c
|
Fixup the fatal error in symbol check
|
2023-04-26 10:40:57 +08:00 |
|
BeneficialCode
|
a291229aa5
|
Update the driver version
|
2023-04-26 10:12:54 +08:00 |
|
BeneficialCode
|
d17d899cab
|
Modified the DbgSys routines's name
|
2023-04-02 18:16:03 +08:00 |
|
BeneficialCode
|
f0d94ab648
|
Complete the DbgSys symbol init and hook DbgSys
|
2023-03-31 18:33:31 +08:00 |
|
BeneficialCode
|
114dc79729
|
Complete most of the DbgSys function
|
2023-03-30 22:49:13 +08:00 |
|
BeneficialCode
|
f072cc5fb9
|
Update the DbgSys code
|
2023-03-30 19:47:45 +08:00 |
|
BeneficialCode
|
b58d4cf807
|
Update the DbgSys
|
2023-03-29 22:46:53 +08:00 |
|
BeneficialCode
|
5980c4e6b7
|
Support dump the windows extension table function
|
2023-03-06 22:56:13 +08:00 |
|
BeneficialCode
|
1cc419417f
|
Support the WinExtHosts view
|
2023-03-06 17:34:31 +08:00 |
|
BeneficialCode
|
20e7833fdf
|
Complete the kernel eat hook detect
|
2023-03-02 23:45:17 +08:00 |
|
BeneficialCode
|
72ecf6abc9
|
Support Kernel EAT hook scan
|
2023-03-02 18:34:12 +08:00 |
|
BeneficialCode
|
74db61eb39
|
Update the DbgkCreateThread
|
2023-02-25 20:47:55 +08:00 |
|
BeneficialCode
|
cf6cb13f49
|
Update DbgkCreateThread function
|
2023-02-25 08:52:13 +08:00 |
|
BeneficialCode
|
b08717faab
|
update the DbgkpPostFakeThreadMessages
|
2023-02-23 22:58:06 +08:00 |
|
BeneficialCode
|
69381d065b
|
tweak some bugs in File Mini Filter
|
2023-02-22 11:00:47 +08:00 |
|
BeneficialCode
|
b7c96e0860
|
Update the version cause the minifilter has some bugs
|
2023-02-22 07:53:48 +08:00 |
|
BeneficialCode
|
fcbb3ed0b1
|
Delete some old useless code
|
2023-02-21 20:56:38 +08:00 |
|
CORP\zengquan
|
efddbbb52c
|
Fixup the sys dump blue screen bug check
|
2023-02-18 14:35:45 +08:00 |
|
BeneficialCode
|
60ee70445c
|
Add the driver module dump interface. But it still has memory access violation.
|
2023-01-08 21:37:56 +08:00 |
|
BeneficialCode
|
543eedcc76
|
tweak the prevent delete policy bug
|
2023-01-08 13:23:49 +08:00 |
|
BeneficialCode
|
3a7a8b9cc0
|
Add the EPROCESS info in process list
|
2023-01-08 09:11:18 +08:00 |
|
BeneficialCode
|
abe307ae5f
|
Can get the count of vad
|
2022-12-11 11:34:27 +08:00 |
|
BeneficialCode
|
34d3c85cfb
|
Tweak some merage syntax errors
|
2022-12-06 20:07:10 +08:00 |
|