13 Commits

Author	SHA1	Message	Date
JKornev	146af98691	Fixed issue with avoiding parent process checking and etc	2016-12-10 14:23:04 +03:00
JKornev	3851dcd17d	Multiple changes ... - Fixed issue with signing Release driver builds - Renamed all Nt* functions to Zw* (access denied fix, KTHREAD!PreviousMode) - Added "apply to all processes" feature for adding exluded\protected images api - Fixed sync issues for process table, sync primitives moved to external code etc	2016-10-19 00:35:52 +03:00
JKornev	6b0777c4de	Added new process exclusion tests	2016-10-15 00:36:57 +03:00
JKornev	98014e750e	Major changes ... - Fixed BSOD on driver deinitialization step - Fixed resources leak in the reg filter - Fixed path normalization function - Added support for inherit type in predefined process monitor configs - Added support for opening protected processes by subsystem - Added tests for protected processes and other little fixes	2016-10-11 00:45:07 +03:00
JKornev	4c3047c669	Added path normalization to the ps monitor	2016-09-19 23:20:44 +03:00
JKornev	1fdfa70156	Fix for issue with file\dir name duplication	2016-09-07 02:23:41 +03:00
JKornev	5d1787ffbc	Added exclude\protect list loading from HiddenCLI to driver ... Fixed memory leak on the CreateProcessNotifyCallback	2016-09-05 22:30:26 +03:00
JKornev	a25458a4c8	Added usermode implementation of the PsMonitor interface ... and etc	2016-09-04 22:00:55 +03:00
JKornev	80b89c2f28	Added Get\Set process exclude\protect state ... Fixed issue with the hidden.inf and etc	2016-09-04 20:19:17 +03:00
JKornev	f65a2301c6	PS monitor internal API implementation	2016-08-30 22:40:25 +03:00
JKornev	07d0e4d747	PsTable raise condition fix and etc	2016-08-28 19:53:33 +03:00
JKornev	480b0ef15f	Added protected & excluded process lists	2016-08-27 23:18:54 +03:00
JKornev	228b3fb1fc	initial commit	2016-07-22 02:02:31 +03:00