10 Commits

Author	SHA1	Message	Date
JKornev	1424bee8ee	Added a test for a process hiding	2021-07-31 02:56:13 +03:00
JKornev	206258a6fe	Added a cache to routine that looks for ActiveProcessLinks offset	2021-07-30 22:44:57 +03:00
JKornev	0628ceb520	Fix for reference leak and output in a driver	2021-07-29 01:00:45 +03:00
JKornev	7e1d00c2dd	Fixed compilation errors on x64 arch	2021-07-05 01:30:25 +03:00
JKornev	7ad8dcaad3	Windows 10 path normalization fix	2018-12-20 02:54:26 +03:00
JKornev	01bba71d6d	Logging improvements	2018-12-03 00:57:11 +03:00
JKornev	c3705478b1	Stealth mode first steps	2016-12-30 19:57:54 +03:00
JKornev	3851dcd17d	Multiple changes ... - Fixed issue with signing Release driver builds - Renamed all Nt* functions to Zw* (access denied fix, KTHREAD!PreviousMode) - Added "apply to all processes" feature for adding exluded\protected images api - Fixed sync issues for process table, sync primitives moved to external code etc	2016-10-19 00:35:52 +03:00
JKornev	98014e750e	Major changes ... - Fixed BSOD on driver deinitialization step - Fixed resources leak in the reg filter - Fixed path normalization function - Added support for inherit type in predefined process monitor configs - Added support for opening protected processes by subsystem - Added tests for protected processes and other little fixes	2016-10-11 00:45:07 +03:00
JKornev	228b3fb1fc	initial commit	2016-07-22 02:02:31 +03:00