
PEB (PROCESS ENVIRONMENT BLOCK)
useful disk analyzer:
>How do I activate Windows?
https://github.com/massgravel/Microsoft-Activation-Scripts
HWID mimics OEM activation to generate a permanent legitimate license.
>>Which version should I install?
>Education/Enterprise
Can disable telemetry and get an delay updates a year.
>LTSC / IoT LTSC
LTSC = 5 years support, VL/KMS only
IoT LTSC = 10 years support, HWID only
Comes with Win32 system apps, no MS Store, no feature updates, security updates only.
If you need MS Store, run this in cmd: wsreset -i
>Do I even need IoT LTSC?
W10 Home/Pro/Edu/WS/Ent editions end support in 10/2025, LTSC in 2027, IoT LTSC lasts until 2032.
>How do I activate Office?
https://github.com/abbodi1406/KMS_VL_ALL_AIO/releases
Installs a KMS server emulator, not ideal as KMS trips AV sometimes and deactivates. Alternatively, use MSOffice through your browser since it's free. As a last resort, you can try LibreOffice and set it to save as Office file formats.
>Where can I get Windows/Office ISOs?
https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool
Other sources:
https://rentry.org/fwt#links
https://tb.rg-adguard.net
https://www.heidoc.net/php/myvsdump.php SHA1 database (search SHA1, download anywhere)
Always verify SHA1 with 7zip for non-MS sources
>How do I debloat?
https://www.oo-software.com/en/shutup10
https://wpd.app
>Windows/Office installation guide
https://pastebin.com/Q4ced4rE
>Is Windows 11 good?
>Should I upgrade?
You can if you want to.
WinInfo Pasta:
https://rentry.org/fwt
Edge remover:
https://gist.github.com/ishad0w/3b79bf829e9725aa102b2e8446bb5ef8
Office:
https://docs.microsoft.com/en-us/deployoffice/overview-office-deployment-toolSYSCALL TABLE (LINUX) = SSDT - System Service Dispatch Table (WINDOWS)
SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls.
https://github.com/jthuraisamy/SysWhispers
— — — — — -Userland — — — — — — | — — — Kernel Land — — —
RPM —> NtReadVirtualMemory —> SYSCALL —> NtReadVirtualMemory
Kernel32 — — ntdll — — — — — — — — — — — — — — — — ntoskrnl