12 Commits

Author	SHA1	Message	Date
JKornev	5a678ce3c4	Fixed a bug with a process initialization flag in PsMonitor	2021-08-24 23:27:25 +03:00
JKornev	42644b71f5	The first working implementation of the hiding PspCidTable stuff (Win8+)	2021-08-21 23:22:51 +03:00
JKornev	1b76e90ada	Optimized process table access	2021-08-15 03:18:53 +03:00
JKornev	a2e5e8e901	Process table optimization for hidden processes	2021-07-30 03:08:33 +03:00
JKornev	9d3db08314	Implemented /unhide support for processes	2021-07-29 03:27:09 +03:00
JKornev	3f5350a750	Kernel mode hiding process implementation	2021-07-28 22:30:35 +03:00
JKornev	8a9f37e8f2	Kernel level configuration for hidden processes	2021-07-25 23:15:32 +03:00
JKornev	3851dcd17d	Multiple changes ... - Fixed issue with signing Release driver builds - Renamed all Nt* functions to Zw* (access denied fix, KTHREAD!PreviousMode) - Added "apply to all processes" feature for adding exluded\protected images api - Fixed sync issues for process table, sync primitives moved to external code etc	2016-10-19 00:35:52 +03:00
JKornev	98014e750e	Major changes ... - Fixed BSOD on driver deinitialization step - Fixed resources leak in the reg filter - Fixed path normalization function - Added support for inherit type in predefined process monitor configs - Added support for opening protected processes by subsystem - Added tests for protected processes and other little fixes	2016-10-11 00:45:07 +03:00
JKornev	07d0e4d747	PsTable raise condition fix and etc	2016-08-28 19:53:33 +03:00
JKornev	480b0ef15f	Added protected & excluded process lists	2016-08-27 23:18:54 +03:00
JKornev	228b3fb1fc	initial commit	2016-07-22 02:02:31 +03:00