BeneficialCode
|
8968b2ee5f
|
Add the intercept the driver load and backup it
|
2022-02-20 11:55:44 +08:00 |
|
CORP\zengquan
|
9eaa534b7e
|
Add the driver object dispatch routine lookup
|
2022-02-16 19:54:02 +08:00 |
|
BeneficialCode
|
b3451b3fd1
|
Add the ObCallback Routine Dispaly
|
2022-01-02 20:54:51 +08:00 |
|
BeneficialCode
|
79cd254a5e
|
Fixup the ssdt table display
|
2022-01-02 11:16:00 +08:00 |
|
BeneficialCode
|
5b2ec478c4
|
Add the PiDDBCacheTable and UnloadedDrivers Information Display
|
2022-01-01 15:47:39 +08:00 |
|
CORP\zengquan
|
c425897cbe
|
Build one struct that user mode can consume.
Add the APC region.
|
2021-12-31 18:31:06 +08:00 |
|
CORP\zengquan
|
bdf62b0f20
|
Add the loaded and unloaded driver in the sys module
|
2021-12-30 17:32:19 +08:00 |
|
CORP\zengquan
|
d067f44753
|
change the way to grab the ssdt
|
2021-12-25 10:58:04 +08:00 |
|
CORP\zengquan
|
6789a54cf4
|
Add Thread Notify
|
2021-11-29 10:46:20 +08:00 |
|
CORP\zengquan
|
3885ce3253
|
fixup the ssdt rva and windows focus on win7
|
2021-11-25 15:15:34 +08:00 |
|
CORP\zengquan
|
85d736fe4c
|
Add shadow ssdt function hook dected
|
2021-11-16 17:47:46 +08:00 |
|
CORP\zengquan
|
e45bb192ac
|
Delete some old source code
|
2021-11-14 12:27:47 +08:00 |
|
CORP\zengquan
|
bcbccde1aa
|
update registry module
|
2021-10-26 16:12:26 +08:00 |
|
BeneficialCode
|
92474293af
|
添加项目文件。
|
2021-05-26 21:47:17 +08:00 |
|