BeneficialCode
|
8968b2ee5f
|
Add the intercept the driver load and backup it
|
2022-02-20 11:55:44 +08:00 |
|
CORP\zengquan
|
9eaa534b7e
|
Add the driver object dispatch routine lookup
|
2022-02-16 19:54:02 +08:00 |
|
CORP\zengquan
|
ec8fffe671
|
Add the LookasideList and ExecutiveResource
|
2022-01-24 17:11:29 +08:00 |
|
CORP\zengquan
|
e9cd4375e7
|
Fixup system notify enum error
|
2022-01-04 18:21:19 +08:00 |
|
BeneficialCode
|
b3451b3fd1
|
Add the ObCallback Routine Dispaly
|
2022-01-02 20:54:51 +08:00 |
|
BeneficialCode
|
79cd254a5e
|
Fixup the ssdt table display
|
2022-01-02 11:16:00 +08:00 |
|
BeneficialCode
|
5b2ec478c4
|
Add the PiDDBCacheTable and UnloadedDrivers Information Display
|
2022-01-01 15:47:39 +08:00 |
|
CORP\zengquan
|
c425897cbe
|
Build one struct that user mode can consume.
Add the APC region.
|
2021-12-31 18:31:06 +08:00 |
|
BeneficialCode
|
02d991e8da
|
a structure for user-mode
|
2021-12-30 22:35:16 +08:00 |
|
CORP\zengquan
|
bdf62b0f20
|
Add the loaded and unloaded driver in the sys module
|
2021-12-30 17:32:19 +08:00 |
|
CORP\zengquan
|
75f358c675
|
Add the log mechanism
|
2021-12-25 14:07:16 +08:00 |
|
CORP\zengquan
|
d067f44753
|
change the way to grab the ssdt
|
2021-12-25 10:58:04 +08:00 |
|
CORP\zengquan
|
6789a54cf4
|
Add Thread Notify
|
2021-11-29 10:46:20 +08:00 |
|
CORP\zengquan
|
3885ce3253
|
fixup the ssdt rva and windows focus on win7
|
2021-11-25 15:15:34 +08:00 |
|
CORP\zengquan
|
85d736fe4c
|
Add shadow ssdt function hook dected
|
2021-11-16 17:47:46 +08:00 |
|
CORP\zengquan
|
e45bb192ac
|
Delete some old source code
|
2021-11-14 12:27:47 +08:00 |
|
CORP\zengquan
|
69f727e8d1
|
Add symbol download
|
2021-11-03 11:03:43 +08:00 |
|
CORP\zengquan
|
aeca6b12ff
|
Add Service View
|
2021-10-29 17:00:58 +08:00 |
|
CORP\zengquan
|
bcbccde1aa
|
update registry module
|
2021-10-26 16:12:26 +08:00 |
|
BeneficialCode
|
92474293af
|
添加项目文件。
|
2021-05-26 21:47:17 +08:00 |
|