mirror of
https://github.com/ciyze0101/Windows-Rootkits
synced 2024-06-25 16:28:06 +00:00
3 lines
82 B
Plaintext
3 lines
82 B
Plaintext
|
use PsSetLoadImageNotifyRoutine to monitor dll load
|
||
|
|
when dll load , scan it's IAT
|