Commit Graph
125 Commits
Author SHA1 Message Date
CORP\zengquan 4e611829f9 Support find the pool tag by text 2022-08-22 17:37:57 +08:00
CORP\zengquan 80881a7241 Support the piddbcache sort by driver name 2022-08-21 19:25:40 +08:00
BeneficialCode f0259a4a95 Add the detours kernel inline hook engine 2022-08-21 10:37:41 +08:00
CORP\zengquan 1e29867146 add the detour lib 2022-08-19 18:22:42 +08:00
CORP\zengquan 54de773767 tweak a compile error on x86 2022-08-19 13:59:08 +08:00
CORP\zengquan 2815ad142e Support the kernel pool tag enum 2022-08-19 11:16:05 +08:00
BeneficialCode 68f790d1af Add the detour to the lib 2022-08-16 22:01:15 +08:00
CORP\zengquan ec2b4a06ac Fixup the object callback remove bug 2022-08-16 19:18:53 +08:00
CORP\zengquan f0dc0f78ce Support the ini and reg configurations 2022-08-16 10:43:28 +08:00
CORP\zengquan d6a565f6d4 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-08-15 09:17:14 +08:00
CORP\zengquan 58ca578588 Add some theme settings 2022-08-15 09:17:05 +08:00
BeneficialCode b8e2cec87c Support set the opacity 2022-08-15 08:39:47 +08:00
BeneficialCode 8fbaed7af0 Add the Font configuration dialog 2022-08-13 23:00:27 +08:00
CORP\zengquan 506ee10d2d Add the memory block dump 2022-08-12 17:15:23 +08:00
CORP\zengquan 9ece79987f Support copy/export inline hook info 2022-08-12 16:13:11 +08:00
CORP\zengquan b2ee7a2e03 Support the x86 inline hook scan 2022-08-12 10:34:51 +08:00
CORP\zengquan 94370fe332 Update the memory size format 2022-08-11 15:29:08 +08:00
CORP\zengquan 416f38ee64 Add the x64 inline hook scan 2022-08-11 11:21:25 +08:00
CORP\zengquan 56c93c85ea tweak the suspicious bug when call SymGetSymFromName 2022-08-11 10:26:44 +08:00
BeneficialCode e1659d5589 Update the symbol handler 2022-08-10 22:03:14 +08:00
BeneficialCode 1996c847f9 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-08-10 19:20:41 +08:00
BeneficialCode a0e188510e Add the teb struct 2022-08-10 19:20:27 +08:00
CORP\zengquan 9f86b7f0df Add the release bug :) 2022-08-10 18:41:34 +08:00
CORP\zengquan 36a29ec236 Add the disassembly library 2022-08-09 18:49:15 +08:00
CORP\zengquan 0e2b9e4416 fixup the ExReferenceCallBackBlock's bug 2022-08-09 14:15:15 +08:00
BeneficialCode 6cbdeb88e8 Only support single instance. 2022-08-07 17:59:04 +08:00
BeneficialCode 36257b2f2a Fixup the symbol get method bugs 2022-08-06 20:30:50 +08:00
BeneficialCode c9753b8acf tweak minor error 2022-08-06 13:19:26 +08:00
BeneficialCode b2cd4056d3 Delete the Config Window close handle function 2022-08-06 13:17:00 +08:00
BeneficialCode f5ea93ff3d modified the control id 2022-08-06 12:12:36 +08:00
BeneficialCode f727636b9e resolve the resource.h conflict 2022-08-06 12:03:47 +08:00
BeneficialCode 2c0164f989 display the system info 2022-08-06 11:59:35 +08:00
CORP\zengquan 55f6c30731 support the HLCU、HKLM etc. in the search edit bar. 2022-07-29 16:01:06 +08:00
CORP\zengquan d81ea49b97 support go to usually used register key 2022-07-29 14:47:49 +08:00
CORP\zengquan 165f3d0ecf Delete some menus 2022-07-25 15:37:20 +08:00
CORP\zengquan 6e07f974f3 Delete the message map 1 2022-07-22 15:59:08 +08:00
CORP\zengquan 2725066cfa Clean the pdb files If the symbol pdb initailize failed. 2022-07-22 14:16:07 +08:00
CORP\zengquan 070c25dc72 Add the symbol download rubustness 2022-07-22 14:07:23 +08:00
CORP\zengquan 0513149419 fixup the symbol download check bug 2022-07-22 11:19:54 +08:00
BeneficialCode c04d24192f Update README.md 2022-07-10 17:35:44 +08:00
BeneficialCode 679d6db72a Add the build event 2022-07-10 17:33:48 +08:00
BeneficialCode dbc9c8d301 Optimize the driver resource 2022-07-10 14:11:15 +08:00
BeneficialCode d6714a8628 Update the etw view 2022-07-08 02:18:00 +08:00
BeneficialCode 39c48a8171 Add the event and filter configuration dialog 2022-07-03 22:41:17 +08:00
BeneficialCode 98ba5ecef5 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-07-02 11:54:30 +08:00
BeneficialCode a21e2cb130 Add the Event Trace View 2022-07-02 09:47:01 +08:00
BeneficialCode 2f01d42f58 Add the EvenTrace to the WinSysCore 2022-06-26 21:17:29 +08:00
CORP\zengquan 64b21dda29 Add the process access mask doc hyperlink 2022-06-23 10:25:02 +08:00
CORP\zengquan 3e363aba60 Not support in safe mode 2022-06-22 10:20:36 +08:00
CORP\zengquan 5fcc7b8dae Add the log to the ImageNotify 2022-06-22 09:51:33 +08:00