115 Commits
Author SHA1 Message Date
BeneficialCode 32754a4555 Fix x86 compilation errors 2026-07-25 10:48:46 +08:00
BeneficialCode 2256c8260c No vcpkg when building kernel. 2024-09-14 16:48:40 +08:00
BeneficialCode f8cbf184f0 Add the kill process native method. 2024-07-07 11:26:12 +08:00
BeneficialCode 1b9773b6f3 Update the OB_CALLBACK_CONTEXT_BLOCK define. 2024-04-26 20:06:20 +08:00
BeneficialCode d38dc2bb7a minor fixes 2024-03-05 10:50:39 +08:00
Beneficial fe1c5276be Changed the target version. 2023-12-04 14:58:44 +08:00
Beneficial 41cfa78af9 Move the inline hook scan in the kernel module view. 2023-11-17 09:38:26 +08:00
BeneficialCode 2db014589d Delete the sdv 2023-10-29 19:54:11 +08:00
BeneficialCode 5b599e243d Analyze the code. 2023-10-29 13:47:46 +08:00
BeneficialCode 2f4b15a446 Add the object callback view. 2023-10-12 16:12:03 +08:00
BeneficialCode 997a4c3403 fixup the error access memory 2023-09-09 20:04:42 +08:00
BeneficialCode 1e7f39346f Don't verify the ssl cert. 2023-09-09 14:29:36 +08:00
BeneficialCode 777ed451a1 fixup the %wZ format faltal error. 2023-09-08 15:36:53 +08:00
BeneficialCode 766f0e6485 Update the hook function. 2023-08-27 00:00:18 +08:00
BeneficialCode ed7ff58404 Hook hash search function. 2023-08-24 08:43:30 +08:00
BeneficialCode fa396262d6 Disable driver load by hook. 2023-08-23 22:48:44 +08:00
BeneficialCode ab6d13552b Enhance the explorer view. 2023-08-10 14:59:46 +08:00
BeneficialCode 9cb6c297a1 On Windows 11, the SystemSessionPoolTagInformation is not a valid information class for the specified object. 2023-08-04 15:15:11 +08:00
BeneficialCode 257d5acb83 Enhance the pointer check 2023-08-03 17:33:30 +08:00
BeneficialCode b2c3b274f5 Add the Explorer view ui. 2023-06-14 19:57:16 +08:00
BeneficialCode ab67a358fe Now it can detect the ntoskrnl inline hook 2023-05-31 23:23:20 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode cb3fbee703 fixup a fatal bug in khook. 2023-05-28 21:39:46 +08:00
BeneficialCode 4456ca136e fixup the version info 2023-05-19 07:52:13 +08:00
BeneficialCode 77db89d661 update the version info 2023-05-19 07:28:15 +08:00
BeneficialCode 48dc5ff02a remove the detour library 2023-05-19 07:13:13 +08:00
BeneficialCode a789366636 Support remove and add debugger into the ListView 2023-05-14 22:44:29 +08:00
BeneficialCode 116235569c Fixup the fatal error in symbol check 2023-04-26 10:40:57 +08:00
BeneficialCode a291229aa5 Update the driver version 2023-04-26 10:12:54 +08:00
BeneficialCode d17d899cab Modified the DbgSys routines's name 2023-04-02 18:16:03 +08:00
BeneficialCode f0d94ab648 Complete the DbgSys symbol init and hook DbgSys 2023-03-31 18:33:31 +08:00
BeneficialCode 114dc79729 Complete most of the DbgSys function 2023-03-30 22:49:13 +08:00
BeneficialCode f072cc5fb9 Update the DbgSys code 2023-03-30 19:47:45 +08:00
BeneficialCode b58d4cf807 Update the DbgSys 2023-03-29 22:46:53 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 20e7833fdf Complete the kernel eat hook detect 2023-03-02 23:45:17 +08:00
BeneficialCode 72ecf6abc9 Support Kernel EAT hook scan 2023-03-02 18:34:12 +08:00
BeneficialCode 74db61eb39 Update the DbgkCreateThread 2023-02-25 20:47:55 +08:00
BeneficialCode cf6cb13f49 Update DbgkCreateThread function 2023-02-25 08:52:13 +08:00
BeneficialCode b08717faab update the DbgkpPostFakeThreadMessages 2023-02-23 22:58:06 +08:00
BeneficialCode 69381d065b tweak some bugs in File Mini Filter 2023-02-22 11:00:47 +08:00
BeneficialCode b7c96e0860 Update the version cause the minifilter has some bugs 2023-02-22 07:53:48 +08:00
BeneficialCode fcbb3ed0b1 Delete some old useless code 2023-02-21 20:56:38 +08:00
CORP\zengquan efddbbb52c Fixup the sys dump blue screen bug check 2023-02-18 14:35:45 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 543eedcc76 tweak the prevent delete policy bug 2023-01-08 13:23:49 +08:00
BeneficialCode 3a7a8b9cc0 Add the EPROCESS info in process list 2023-01-08 09:11:18 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode 34d3c85cfb Tweak some merage syntax errors 2022-12-06 20:07:10 +08:00