18 Commits

Author SHA1 Message Date
BeneficialCode 6034ff2a7d Support the Russian Language. 2023-06-04 12:04:35 +08:00
BeneficialCode da3487e97f Add some kernel inline hook detect code. 2023-05-30 15:21:09 +08:00
BeneficialCode cb3fbee703 fixup a fatal bug in khook. 2023-05-28 21:39:46 +08:00
CORP\zengquan 89dae76fb6 Add notify icon 2022-09-09 11:18:25 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
CORP\zengquan 4a1052d569 Support enum the kernel timer (DPC) 2022-08-28 14:01:47 +08:00
BeneficialCode bd31015973 Add the PiDDBCacheTable, UnloadDriverTable and ProcessThreadTable export. 2022-06-09 13:40:03 +08:00
BeneficialCode 472889cbb4 1.Add the thread's own module
2.Add PiDDBCache、UnloadedDriver and Threads copy on right menu
3.fix the driver backup path in WinArk runtime path
2022-06-08 22:31:19 +08:00
BeneficialCode a30d58c897 Add the GetUserModuleByAddress and enhance the process module tracker 2022-06-07 22:47:07 +08:00
BeneficialCode 781d50890a Fixup the Process PreOperation remove blue bug 2022-05-13 22:17:52 +08:00
CORP\zengquan 9eaa534b7e Add the driver object dispatch routine lookup 2022-02-16 19:54:02 +08:00
CORP\zengquan 3735d0e01b Fixup the chinese lauage convert error 2022-01-05 17:04:02 +08:00
BeneficialCode 8f0d78e1a2 Fixup the PiddbCacheData size 2022-01-04 20:35:14 +08:00
CORP\zengquan 7ecacd5749 fixup the symbol parser load pdb file error. The dllSize cannot be zero. 2021-11-26 21:11:23 +08:00
CORP\zengquan e890ec8cb1 Add some kernel module infomation display 2021-11-26 10:48:50 +08:00
CORP\zengquan e45bb192ac Delete some old source code 2021-11-14 12:27:47 +08:00
CORP\zengquan bcbccde1aa update registry module 2021-10-26 16:12:26 +08:00
BeneficialCode 92474293af 添加项目文件。 2021-05-26 21:47:17 +08:00