GithubStar/WinArk
1
0
Fork 0
mirror of https://github.com/BeneficialCode/WinArk.git synced 2026-10-21 16:06:23 +08:00
Code Issues Packages Projects Releases Wiki Activity
263 Commits 1 Branch 1 Tag
6c19014ebec3eb46d76f342a81fa4a344e495ced
Commit Graph

76 Commits

Author SHA1 Message Date
BeneficialCode 0b31dae22e Update code 2023-03-29 00:16:23 +08:00
BeneficialCode b2bb9d95e7 Change the service config by ChangeServiceConfig 2023-03-07 10:09:08 +08:00
BeneficialCode 5980c4e6b7 Support dump the windows extension table function 2023-03-06 22:56:13 +08:00
BeneficialCode 1cc419417f Support the WinExtHosts view 2023-03-06 17:34:31 +08:00
BeneficialCode 20e7833fdf Complete the kernel eat hook detect 2023-03-02 23:45:17 +08:00
BeneficialCode d33cff4026 Add two process info fields 2023-03-02 15:45:08 +08:00
BeneficialCode 60ee70445c Add the driver module dump interface. But it still has memory access violation. 2023-01-08 21:37:56 +08:00
BeneficialCode 543eedcc76 tweak the prevent delete policy bug 2023-01-08 13:23:49 +08:00
BeneficialCode 3a7a8b9cc0 Add the EPROCESS info in process list 2023-01-08 09:11:18 +08:00
BeneficialCode abe307ae5f Can get the count of vad 2022-12-11 11:34:27 +08:00
BeneficialCode f84b4dd91f ApiSets NameLength on Windows 7 x86 equals 0. 2022-12-06 22:35:52 +08:00
CORP\zengquan 3ace0b86de Update the EAT hook scan method 2022-11-04 18:04:24 +08:00
CORP\zengquan 550757ef42 Modify the driver start type 2022-10-25 17:43:49 +08:00
CORP\zengquan 081ecbdbb1 Bug fixed (network byte order) 2022-10-18 11:08:39 +08:00
CORP\zengquan c4512616ce Tweak some minor bugs :-) 2022-10-12 13:58:40 +08:00
CORP\zengquan 13b8eb086b Support enum the WFP filters 2022-10-11 17:59:05 +08:00
CORP\zengquan c95e4e0727 Support remove the Minifilter callback 2022-09-29 16:05:44 +08:00
CORP\zengquan 6481124870 Bypass the vmp3.6 kernel debugger dectect. 2022-09-22 15:58:16 +08:00
CORP\zengquan a54b37c932 Run the WInArk under System account. 2022-09-20 18:21:18 +08:00
CORP\zengquan dc67c91090 Add some service control code 2022-09-09 16:30:03 +08:00
CORP\zengquan 89dae76fb6 Add notify icon 2022-09-09 11:18:25 +08:00
CORP\zengquan 521f8cebd5 Add the Logon Session View 2022-09-08 18:25:41 +08:00
CORP\zengquan 0a702f8899 Add the MiniFilter callback enum 2022-09-07 19:54:43 +08:00
BeneficialCode abb87b6c30 Add some enum io timer bug code 2022-08-28 22:36:07 +08:00
BeneficialCode 3cc29057ad Fixup the x86 code bug! 2022-08-28 17:35:29 +08:00
CORP\zengquan 4a1052d569 Support enum the kernel timer (DPC) 2022-08-28 14:01:47 +08:00
CORP\zengquan 303569e737 Add the enum kernel timer object 2022-08-27 19:28:07 +08:00
CORP\zengquan e85218297a Fixup the system notify remove method bug 2022-08-26 15:22:05 +08:00
CORP\zengquan 16458951ad Support erase PreObOperation 2022-08-25 18:46:24 +08:00
CORP\zengquan b2ee7a2e03 Support the x86 inline hook scan 2022-08-12 10:34:51 +08:00
CORP\zengquan 9f86b7f0df Add the release bug :) 2022-08-10 18:41:34 +08:00
BeneficialCode 36257b2f2a Fixup the symbol get method bugs 2022-08-06 20:30:50 +08:00
BeneficialCode b2cd4056d3 Delete the Config Window close handle function 2022-08-06 13:17:00 +08:00
BeneficialCode 2c0164f989 display the system info 2022-08-06 11:59:35 +08:00
BeneficialCode dbc9c8d301 Optimize the driver resource 2022-07-10 14:11:15 +08:00
BeneficialCode d6714a8628 Update the etw view 2022-07-08 02:18:00 +08:00
BeneficialCode 98ba5ecef5 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-07-02 11:54:30 +08:00
BeneficialCode a21e2cb130 Add the Event Trace View 2022-07-02 09:47:01 +08:00
BeneficialCode 2f01d42f58 Add the EvenTrace to the WinSysCore 2022-06-26 21:17:29 +08:00
CORP\zengquan 64b21dda29 Add the process access mask doc hyperlink 2022-06-23 10:25:02 +08:00
BeneficialCode bd31015973 Add the PiDDBCacheTable, UnloadDriverTable and ProcessThreadTable export. 2022-06-09 13:40:03 +08:00
BeneficialCode 472889cbb4 1.Add the thread's own module 
2.Add PiDDBCache、UnloadedDriver and Threads copy on right menu
3.fix the driver backup path in WinArk runtime path
 2022-06-08 22:31:19 +08:00
BeneficialCode a30d58c897 Add the GetUserModuleByAddress and enhance the process module tracker 2022-06-07 22:47:07 +08:00
BeneficialCode 42d24c5e1b Fixup the memory view code bug. Makes code more robust. 2022-06-07 21:32:06 +08:00
CORP\zengquan 7c5de3c900 Get Registry Notify Count by CmpCallbackCount 2022-06-03 20:06:07 +08:00
CORP\zengquan 4a78703ea8 Add the registry callback enum 2022-06-03 17:35:24 +08:00
CORP\zengquan 52636b74e3 Merge branch 'master' of https://github.com/BeneficialCode/Anti-Rootkit 2022-05-30 14:44:38 +08:00
CORP\zengquan f083aeed62 fixup the current dir function error 2022-05-30 14:44:28 +08:00
BeneficialCode 781d50890a Fixup the Process PreOperation remove blue bug 2022-05-13 22:17:52 +08:00
CORP\zengquan 7f6b32201e Add the module bit analysis 2022-04-27 18:04:17 +08:00