Maxime Meignan 4c2449cfd4 Changed the way found callbacks are stored (removed the size limit)

2023-11-29 14:25:39 +01:00

..

CiOffsets.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

CredGuard.h

…

DriverDBUtil.h

…

DriverGDRV.h

…

DriverOps.h

…

DriverRTCore.h

…

ETWThreatIntel.h

…

FileUtils.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

FileVersion.h

…

Firewalling.h

…

FirewallOps.h

…

HttpClient.h

…

IsEDRChecks.h

…

IsElevatedProcess.h

…

KernelCallbacks.h

Changed the way found callbacks are stored (removed the size limit)

2023-11-29 14:25:39 +01:00

KernelDSE.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

KernelMemoryPrimitives.h

…

KernelPatternSearch.h

…

KernelUtils.h

…

ListUtils.h

…

NtoskrnlOffsets.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

ObjectCallbacks.h

…

PdbParser.h

Implements a check on PDB files to avoid using an invalid one and crash the machine

2023-10-10 15:44:20 +02:00

PdbSymbols.h

Implements a check on PDB files to avoid using an invalid one and crash the machine

2023-10-10 15:44:20 +02:00

PEBBrowse.h

…

PEParser.h

PE parser: added a feature to parse a PE directly from kernel memory

2023-11-03 16:13:13 +01:00

PrintFunctions.h

…

ProcessDump.h

…

ProcessDumpDirectSyscalls.h

…

RemotePEBBrowser.h

…

RunAsPPL.h

…

SignatureOps.h

…

StringUtils.h

…

SW2_Syscalls.h

…

SyscallProcessUtils.h

…

Syscalls.h

…

Undoc_64.h

…

Undoc.h

…

UserlandHooks.h

various cosmetic changes to please the code analyzer

2023-10-31 17:07:17 +01:00

WdigestOffsets.h

Various cosmetic changes

2023-11-29 00:03:46 +01:00

WindowsServiceOps.h

…