Windows-Rootkits

mirror of https://github.com/ciyze0101/Windows-Rootkits

History

LycorisGuard ccef29e4f1 update update		2018-08-14 20:00:00 +08:00
..
ProcessManager	Update Monitor.cpp	2018-01-21 11:25:57 +08:00
ProcessManagerDrv	update	2018-08-14 20:00:00 +08:00
ProcessManager.sln	Add files via upload	2018-01-21 01:23:40 +08:00
ReadMe	Create ReadMe	2018-01-21 01:21:26 +08:00

ReadMe

1.Enum Process By PsLookupProcessByProcessId/travel Active List/PspCidTable
2.Hdie Process By Process Active List/PspCidTable
3.Monitor Process CreateInformation By PsSetCreateProcessNotifyRoutineEx