13 Commits

Author	SHA1	Message	Date
JKornev	c2ac4b3d61	Registry filter fix	2019-06-09 23:26:37 +03:00
JKornev	01bba71d6d	Logging improvements	2018-12-03 00:57:11 +03:00
JKornev	5b3cf5932f	Improved support of the HKLM\System\CurrentControlSet tree	2017-04-02 03:08:16 +03:00
JKornev	d2af2c51e0	Fixes for Code Analysis artifacts	2017-02-03 01:56:00 +03:00
JKornev	1db58b922c	Memory leak fixes #2 (Verifier tests)	2017-01-30 22:41:24 +03:00
JKornev	1b643e5e84	Configs installation to registry	2016-12-25 23:57:05 +03:00
JKornev	f24aca20ec	Comments update	2016-12-21 23:44:44 +03:00
JKornev	79cec65cf2	Driver loads configs from registry	2016-12-18 21:12:42 +03:00
JKornev	3851dcd17d	Multiple changes ... - Fixed issue with signing Release driver builds - Renamed all Nt* functions to Zw* (access denied fix, KTHREAD!PreviousMode) - Added "apply to all processes" feature for adding exluded\protected images api - Fixed sync issues for process table, sync primitives moved to external code etc	2016-10-19 00:35:52 +03:00
JKornev	98014e750e	Major changes ... - Fixed BSOD on driver deinitialization step - Fixed resources leak in the reg filter - Fixed path normalization function - Added support for inherit type in predefined process monitor configs - Added support for opening protected processes by subsystem - Added tests for protected processes and other little fixes	2016-10-11 00:45:07 +03:00
JKornev	4c3047c669	Added path normalization to the ps monitor	2016-09-19 23:20:44 +03:00
JKornev	59b989dcc5	Added new types of operations to Reg filter (set,query,delete value)	2016-09-18 17:23:37 +03:00
JKornev	228b3fb1fc	initial commit	2016-07-22 02:02:31 +03:00