27 Commits

Author SHA1 Message Date
Beneficial 41cfa78af9 Move the inline hook scan in the kernel module view. 2023-11-17 09:38:26 +08:00
BeneficialCode 0090d300ca Avoid some warnings. 2023-06-19 18:18:26 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode d17d899cab Modified the DbgSys routines's name 2023-04-02 18:16:03 +08:00
BeneficialCode f0d94ab648 Complete the DbgSys symbol init and hook DbgSys 2023-03-31 18:33:31 +08:00
BeneficialCode 114dc79729 Complete most of the DbgSys function 2023-03-30 22:49:13 +08:00
BeneficialCode f072cc5fb9 Update the DbgSys code 2023-03-30 19:47:45 +08:00
BeneficialCode 0b31dae22e Update code 2023-03-29 00:16:23 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 72ecf6abc9 Support Kernel EAT hook scan 2023-03-02 18:34:12 +08:00
BeneficialCode cf6cb13f49 Update DbgkCreateThread function 2023-02-25 08:52:13 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 996e7a6f6e upload some png 2022-12-21 10:01:27 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode a535c36ac4 Merge the code 2022-12-06 19:54:59 +08:00
BeneficialCode d4de2b40b7 Tweak some compile errors 2022-11-27 15:07:19 +08:00
BeneficialCode 34ea5246cc Remove the struct define location 2022-11-26 13:35:38 +08:00
BeneficialCode f7e8ddb966 Add go to the kernel module file location 2022-11-26 13:33:42 +08:00
BeneficialCode 289d6243be Add the NtDebugActiveProcess function to DbgSys 2022-11-06 23:30:26 +08:00
BeneficialCode b194029515 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-11-06 16:53:45 +08:00
BeneficialCode 9f6f503108 Update the kernel inject code 2022-11-06 16:53:36 +08:00
CORP\zengquan c95e4e0727 Support remove the Minifilter callback 2022-09-29 16:05:44 +08:00
CORP\zengquan be83f5b1aa Fixup a symbol pdb download error. 2022-09-08 13:32:54 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
BeneficialCode b705e5ab2f Add some kernel inject dll code 2022-09-05 08:38:10 +08:00
CORP\zengquan e45bb192ac Delete some old source code 2021-11-14 12:27:47 +08:00