BeneficialCode
|
1a9eb48947
|
Detect if a process is using a VEH.
|
2025-11-04 12:44:57 +08:00 |
|
BeneficialCode
|
cc34499d55
|
fixup the HexEdit bug.
|
2025-01-29 19:56:45 +08:00 |
|
BeneficialCode
|
f9e0510d32
|
Tweak a minor bug.
|
2024-08-01 10:41:56 +08:00 |
|
BeneficialCode
|
70bfa048af
|
Modify some function names.
|
2024-07-16 11:07:17 +08:00 |
|
BeneficialCode
|
eb33494782
|
support getting Object Name
|
2024-07-15 11:27:38 +08:00 |
|
BeneficialCode
|
f8cbf184f0
|
Add the kill process native method.
|
2024-07-07 11:26:12 +08:00 |
|
BeneficialCode
|
2d2cb83822
|
Merge branch 'master' of https://github.com/BeneficialCode/WinArk
|
2024-05-15 15:33:30 +08:00 |
|
BeneficialCode
|
2f118164dc
|
fixup a memory leak.
|
2024-05-15 15:33:13 +08:00 |
|
BeneficialCode
|
12c026a089
|
Fixup the kernel module list error on Windows 7 x64.
|
2024-03-23 17:29:08 +08:00 |
|
Beneficial
|
41cfa78af9
|
Move the inline hook scan in the kernel module view.
|
2023-11-17 09:38:26 +08:00 |
|
BeneficialCode
|
2f4b15a446
|
Add the object callback view.
|
2023-10-12 16:12:03 +08:00 |
|
BeneficialCode
|
574f573509
|
Tweak the pdb download error.
|
2023-09-18 13:50:19 +08:00 |
|
BeneficialCode
|
1e7f39346f
|
Don't verify the ssl cert.
|
2023-09-09 14:29:36 +08:00 |
|
BeneficialCode
|
7a124faad4
|
fixup the compile error on x86.
|
2023-08-30 17:31:16 +08:00 |
|
BeneficialCode
|
1021468671
|
Support for sorting handle's name.
|
2023-08-27 21:01:57 +08:00 |
|
BeneficialCode
|
ed7ff58404
|
Hook hash search function.
|
2023-08-24 08:43:30 +08:00 |
|
BeneficialCode
|
fa396262d6
|
Disable driver load by hook.
|
2023-08-23 22:48:44 +08:00 |
|
BeneficialCode
|
ab6d13552b
|
Enhance the explorer view.
|
2023-08-10 14:59:46 +08:00 |
|
BeneficialCode
|
a28cd1900d
|
Support show the token privilege display name.
|
2023-08-02 11:46:38 +08:00 |
|
BeneficialCode
|
2bbbd47770
|
Add the system information
|
2023-07-26 17:03:32 +08:00 |
|
BeneficialCode
|
8eeaeaf2dd
|
tweak minor bug
|
2023-06-21 15:35:53 +08:00 |
|
BeneficialCode
|
a0b1d531e5
|
The new kernel handler
|
2023-06-21 15:24:39 +08:00 |
|
BeneficialCode
|
0090d300ca
|
Avoid some warnings.
|
2023-06-19 18:18:26 +08:00 |
|
BeneficialCode
|
6034ff2a7d
|
Support the Russian Language.
|
2023-06-04 12:04:35 +08:00 |
|
BeneficialCode
|
da3487e97f
|
Add some kernel inline hook detect code.
|
2023-05-30 15:21:09 +08:00 |
|
BeneficialCode
|
cb3fbee703
|
fixup a fatal bug in khook.
|
2023-05-28 21:39:46 +08:00 |
|
BeneficialCode
|
0b31dae22e
|
Update code
|
2023-03-29 00:16:23 +08:00 |
|
BeneficialCode
|
b2bb9d95e7
|
Change the service config by ChangeServiceConfig
|
2023-03-07 10:09:08 +08:00 |
|
BeneficialCode
|
5980c4e6b7
|
Support dump the windows extension table function
|
2023-03-06 22:56:13 +08:00 |
|
BeneficialCode
|
1cc419417f
|
Support the WinExtHosts view
|
2023-03-06 17:34:31 +08:00 |
|
BeneficialCode
|
20e7833fdf
|
Complete the kernel eat hook detect
|
2023-03-02 23:45:17 +08:00 |
|
BeneficialCode
|
d33cff4026
|
Add two process info fields
|
2023-03-02 15:45:08 +08:00 |
|
BeneficialCode
|
60ee70445c
|
Add the driver module dump interface. But it still has memory access violation.
|
2023-01-08 21:37:56 +08:00 |
|
BeneficialCode
|
543eedcc76
|
tweak the prevent delete policy bug
|
2023-01-08 13:23:49 +08:00 |
|
BeneficialCode
|
3a7a8b9cc0
|
Add the EPROCESS info in process list
|
2023-01-08 09:11:18 +08:00 |
|
BeneficialCode
|
abe307ae5f
|
Can get the count of vad
|
2022-12-11 11:34:27 +08:00 |
|
BeneficialCode
|
f84b4dd91f
|
ApiSets NameLength on Windows 7 x86 equals 0.
|
2022-12-06 22:35:52 +08:00 |
|
CORP\zengquan
|
3ace0b86de
|
Update the EAT hook scan method
|
2022-11-04 18:04:24 +08:00 |
|
CORP\zengquan
|
550757ef42
|
Modify the driver start type
|
2022-10-25 17:43:49 +08:00 |
|
CORP\zengquan
|
081ecbdbb1
|
Bug fixed (network byte order)
|
2022-10-18 11:08:39 +08:00 |
|
CORP\zengquan
|
c4512616ce
|
Tweak some minor bugs :-)
|
2022-10-12 13:58:40 +08:00 |
|
CORP\zengquan
|
13b8eb086b
|
Support enum the WFP filters
|
2022-10-11 17:59:05 +08:00 |
|
CORP\zengquan
|
c95e4e0727
|
Support remove the Minifilter callback
|
2022-09-29 16:05:44 +08:00 |
|
CORP\zengquan
|
6481124870
|
Bypass the vmp3.6 kernel debugger dectect.
|
2022-09-22 15:58:16 +08:00 |
|
CORP\zengquan
|
a54b37c932
|
Run the WInArk under System account.
|
2022-09-20 18:21:18 +08:00 |
|
CORP\zengquan
|
dc67c91090
|
Add some service control code
|
2022-09-09 16:30:03 +08:00 |
|
CORP\zengquan
|
89dae76fb6
|
Add notify icon
|
2022-09-09 11:18:25 +08:00 |
|
CORP\zengquan
|
521f8cebd5
|
Add the Logon Session View
|
2022-09-08 18:25:41 +08:00 |
|
CORP\zengquan
|
0a702f8899
|
Add the MiniFilter callback enum
|
2022-09-07 19:54:43 +08:00 |
|
BeneficialCode
|
abb87b6c30
|
Add some enum io timer bug code
|
2022-08-28 22:36:07 +08:00 |
|