Mirrors/wavestone-cdt-edrsandblast
1
0
Fork 0
mirror of https://github.com/wavestone-cdt/EDRSandblast.git synced 2026-06-08 16:37:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

[Offsets] adds new ntoskrnl & wdigest offsets

Browse Source
This commit is contained in:
Qazeer
2021-12-07 15:49:28 +01:00
parent 3c17e09d50
commit 894f58377b
2 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Offsets/NtoskrnlOffsets.csv
+12
View File
@@ -418,3 +418,15 @@ ntoskrnl_19041-985.exe,cec360,cec160,cebf60,87a,c19d78,20,60
ntoskrnl_22000-194.exe,cf5f40,cf5d40,cf6140,87a,c15d20,20,60
ntoskrnl_22000-258.exe,cf5f40,cf5d40,cf6140,87a,c15d20,20,60
ntoskrnl_22000-282.exe,cf5f00,cf5d00,cf6100,87a,c163d0,20,60
ntoskrnl_14393-693.exe,33bca0,33baa0,33b8a0,6c2,0,20,50
ntoskrnl_19041-1.exe,cec0e0,cec2e0,cebee0,87a,c19898,20,60
ntoskrnl_9600-17031.exe,2e1a40,2e1840,2e1640,67a,0,10,50
ntoskrnl_9600-19321.exe,2dcb10,2dc910,2dc710,67a,0,20,50
ntoskrnl_9600-19376.exe,2dbb10,2db910,2db710,67a,0,20,50
ntoskrnl_9600-19426.exe,2dbb10,2db910,2db710,67a,0,20,50
ntoskrnl_19041-1348.exe,cec4e0,cec2e0,cec0e0,87a,c197c0,20,60
ntoskrnl_19041-1387.exe,cec1a0,cec3a0,cebfa0,87a,c197a0,20,60
ntoskrnl_22000-348.exe,cf5e00,cf6200,cf6000,87a,c15d40,20,60
ntoskrnl_22000-318.exe,cf5f00,cf5d00,cf6100,87a,c163d0,20,60
ntoskrnl_14393-4704.exe,339e60,339c60,339a60,6ca,0,20,50
ntoskrnl_7601-17514.exe,ffffffffffffffff,ffffffffffffffff,ffffffffffffffff,0,0,8,38
1 ntoskrnlVersion PspCreateProcessNotifyRoutineOffset PspCreateThreadNotifyRoutineOffset PspLoadImageNotifyRoutineOffset _PS_PROTECTIONOffset EtwThreatIntProvRegHandleOffset EtwRegEntry_GuidEntryOffset EtwGuidEntry_ProviderEnableInfoOffset
418 ntoskrnl_22000-194.exe cf5f40 cf5d40 cf6140 87a c15d20 20 60
419 ntoskrnl_22000-258.exe cf5f40 cf5d40 cf6140 87a c15d20 20 60
420 ntoskrnl_22000-282.exe cf5f00 cf5d00 cf6100 87a c163d0 20 60
421 ntoskrnl_14393-693.exe 33bca0 33baa0 33b8a0 6c2 0 20 50
422 ntoskrnl_19041-1.exe cec0e0 cec2e0 cebee0 87a c19898 20 60
423 ntoskrnl_9600-17031.exe 2e1a40 2e1840 2e1640 67a 0 10 50
424 ntoskrnl_9600-19321.exe 2dcb10 2dc910 2dc710 67a 0 20 50
425 ntoskrnl_9600-19376.exe 2dbb10 2db910 2db710 67a 0 20 50
426 ntoskrnl_9600-19426.exe 2dbb10 2db910 2db710 67a 0 20 50
427 ntoskrnl_19041-1348.exe cec4e0 cec2e0 cec0e0 87a c197c0 20 60
428 ntoskrnl_19041-1387.exe cec1a0 cec3a0 cebfa0 87a c197a0 20 60
429 ntoskrnl_22000-348.exe cf5e00 cf6200 cf6000 87a c15d40 20 60
430 ntoskrnl_22000-318.exe cf5f00 cf5d00 cf6100 87a c163d0 20 60
431 ntoskrnl_14393-4704.exe 339e60 339c60 339a60 6ca 0 20 50
432 ntoskrnl_7601-17514.exe ffffffffffffffff ffffffffffffffff ffffffffffffffff 0 0 8 38
Offsets/WdigestOffsets.csv
+2
View File
@@ -31,3 +31,5 @@ wdigest_19041-388.dll,361b4,35c08
wdigest_19041-329.dll,361b4,35c08
wdigest_22406-1000.dll,3caa4,3cab0
wdigest_18362-1216.dll,35124,34b88
wdigest_15063-968.dll,29b24,29708
wdigest_22000-4.dll,2ab7c,2a760
1 wdigestVersion g_fParameter_UseLogonCredentialOffset g_IsCredGuardEnabledOffset
31 wdigest_19041-329.dll 361b4 35c08
32 wdigest_22406-1000.dll 3caa4 3cab0
33 wdigest_18362-1216.dll 35124 34b88
34 wdigest_15063-968.dll 29b24 29708
35 wdigest_22000-4.dll 2ab7c 2a760