'Kernel mode'에 해당되는 글 26건
- 2013.11.15 ConfigFlags
- 2013.10.31 Prefetch / Process Carving : 종료된 프로세스 탐지
- 2013.08.20 Windows Kernel
- 2013.08.19 PsLoadedModuleList
- 2013.08.06 ObjectHook - OpenProcedure
- 2013.08.06 ddkbuild - #pragma message
hswang
카테고리
|
태그목록
- DISABLE_INTEGRITY_CHECKS
- PsGetContextThread
- g_CiEnabled
- SpinLock
- _KTRAP_FRAME
- Wow64EnableWow64FsRedirection
- SepInitializeCodeIntegrity
- PspCreateProcessNotifyRoutine
- DRIVER_IRQL_NOT_LESS_OR_EQUAL
- TESTSIGNING
- RtlCaptureContext
- KdVersionBlock
- PsActiveProcessHead
- ObTypeIndexTable
- g_CiOptions
- SystemStartOptions
- _HANDLE_TABLE_ENTRY
- registers are not yet known
- InterlockedCompareExchange
- PspCidTable
- CI.dll
- IsUserAnAdmin
- TokenElevationType
- StartService 1053
- HandleTableListHead
- NO_MORE_SYSTEM_PTES
- IsUserAdmin
- GetTokenInformation
- 정보보안기사
- CheckTokenMembership