mirror of
https://github.com/ciyze0101/Windows-Rootkits
synced 2024-06-16 03:48:08 +00:00
3 lines
82 B
Plaintext
3 lines
82 B
Plaintext
use PsSetLoadImageNotifyRoutine to monitor dll load
|
|
when dll load , scan it's IAT
|