102 Commits

Author SHA1 Message Date
BeneficialCode 1a9eb48947 Detect if a process is using a VEH. 2025-11-04 12:44:57 +08:00
BeneficialCode cc34499d55 fixup the HexEdit bug. 2025-01-29 19:56:45 +08:00
BeneficialCode f9e0510d32 Tweak a minor bug. 2024-08-01 10:41:56 +08:00
BeneficialCode 70bfa048af Modify some function names. 2024-07-16 11:07:17 +08:00
BeneficialCode eb33494782 support getting Object Name 2024-07-15 11:27:38 +08:00
BeneficialCode f8cbf184f0 Add the kill process native method. 2024-07-07 11:26:12 +08:00
BeneficialCode 2d2cb83822 Merge branch 'master' of https://github.com/BeneficialCode/WinArk 2024-05-15 15:33:30 +08:00
BeneficialCode 2f118164dc fixup a memory leak. 2024-05-15 15:33:13 +08:00
BeneficialCode 12c026a089 Fixup the kernel module list error on Windows 7 x64. 2024-03-23 17:29:08 +08:00
Beneficial 41cfa78af9 Move the inline hook scan in the kernel module view. 2023-11-17 09:38:26 +08:00
BeneficialCode 2f4b15a446 Add the object callback view. 2023-10-12 16:12:03 +08:00
BeneficialCode 574f573509 Tweak the pdb download error. 2023-09-18 13:50:19 +08:00
BeneficialCode 1e7f39346f Don't verify the ssl cert. 2023-09-09 14:29:36 +08:00
BeneficialCode 7a124faad4 fixup the compile error on x86. 2023-08-30 17:31:16 +08:00
BeneficialCode 1021468671 Support for sorting handle's name. 2023-08-27 21:01:57 +08:00
BeneficialCode ed7ff58404 Hook hash search function. 2023-08-24 08:43:30 +08:00
BeneficialCode fa396262d6 Disable driver load by hook. 2023-08-23 22:48:44 +08:00
BeneficialCode ab6d13552b Enhance the explorer view. 2023-08-10 14:59:46 +08:00
BeneficialCode a28cd1900d Support show the token privilege display name. 2023-08-02 11:46:38 +08:00
BeneficialCode 2bbbd47770 Add the system information 2023-07-26 17:03:32 +08:00
BeneficialCode 8eeaeaf2dd tweak minor bug 2023-06-21 15:35:53 +08:00
BeneficialCode a0b1d531e5 The new kernel handler 2023-06-21 15:24:39 +08:00
BeneficialCode 0090d300ca Avoid some warnings. 2023-06-19 18:18:26 +08:00
BeneficialCode 6034ff2a7d Support the Russian Language. 2023-06-04 12:04:35 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode cb3fbee703 fixup a fatal bug in khook. 2023-05-28 21:39:46 +08:00
BeneficialCode 0b31dae22e Update code 2023-03-29 00:16:23 +08:00
BeneficialCode b2bb9d95e7 Change the service config by ChangeServiceConfig 2023-03-07 10:09:08 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 20e7833fdf Complete the kernel eat hook detect 2023-03-02 23:45:17 +08:00
BeneficialCode d33cff4026 Add two process info fields 2023-03-02 15:45:08 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 543eedcc76 tweak the prevent delete policy bug 2023-01-08 13:23:49 +08:00
BeneficialCode 3a7a8b9cc0 Add the EPROCESS info in process list 2023-01-08 09:11:18 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode f84b4dd91f ApiSets NameLength on Windows 7 x86 equals 0. 2022-12-06 22:35:52 +08:00
CORP\zengquan 3ace0b86de Update the EAT hook scan method 2022-11-04 18:04:24 +08:00
CORP\zengquan 550757ef42 Modify the driver start type 2022-10-25 17:43:49 +08:00
CORP\zengquan 081ecbdbb1 Bug fixed (network byte order) 2022-10-18 11:08:39 +08:00
CORP\zengquan c4512616ce Tweak some minor bugs :-) 2022-10-12 13:58:40 +08:00
CORP\zengquan 13b8eb086b Support enum the WFP filters 2022-10-11 17:59:05 +08:00
CORP\zengquan c95e4e0727 Support remove the Minifilter callback 2022-09-29 16:05:44 +08:00
CORP\zengquan 6481124870 Bypass the vmp3.6 kernel debugger dectect. 2022-09-22 15:58:16 +08:00
CORP\zengquan a54b37c932 Run the WInArk under System account. 2022-09-20 18:21:18 +08:00
CORP\zengquan dc67c91090 Add some service control code 2022-09-09 16:30:03 +08:00
CORP\zengquan 89dae76fb6 Add notify icon 2022-09-09 11:18:25 +08:00
CORP\zengquan 521f8cebd5 Add the Logon Session View 2022-09-08 18:25:41 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
BeneficialCode abb87b6c30 Add some enum io timer bug code 2022-08-28 22:36:07 +08:00