-
“Move aside, signature scanning!” Better kernel data discovery through lookaside lists
Introduction A while ago we did some research. That specific project might be published at some…
-
DKOM – Now with Symbolic Links!
You might think “What can ANYONE still say about kernel callbacks? We’ve already seen every…
-
R.I.P ROP: CET Internals in Windows 20H1
A very exciting thing happened recently in the 19H1 (Version 1903) release of Windows 10…
