Kernel

SSDT

WINDBG

IOCTL - IRP

KERNEL CALLBACKS

_EPROCESS (Kernel Process List Stuff)

PspCidTable (how to hide a thread)

Filter

https://www.vergiliusproject.com/

https://gist.github.com/vxcute/6f850da82578b3fe6a10b65496bb6ec8

https://www.geoffchappell.com/studies/windows/km/index.htm

https://rayanfam.com/topics/inline-assembly-in-x64/

https://github.com/daem0nc0re/AtomicSyscall

https://dannyodler.hashnode.dev/racing-bugs-in-windows-kernel

https://idov31.github.io/2022/07/14/lord-of-the-ring0-p1.html

🌱 Back to Garden