Maxime Meignan 0e2b725590 Various fixes (TCHAR/WCHAR confusions & handle leaks)

2023-11-29 17:41:10 +01:00

..

CiOffsets.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

CredGuard.h

…

DriverDBUtil.h

…

DriverGDRV.h

…

DriverOps.h

…

DriverRTCore.h

…

ETWThreatIntel.h

…

FileUtils.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

FileVersion.h

…

Firewalling.h

…

FirewallOps.h

…

FltmgrOffsets.h

[new feature] Implements EDR minifilter callbacks detection and removal

2023-11-29 14:32:35 +01:00

HttpClient.h

…

IsEDRChecks.h

…

IsElevatedProcess.h

…

KernelCallbacks.h

[new feature] Implements EDR minifilter callbacks detection and removal

2023-11-29 14:32:35 +01:00

KernelDSE.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

KernelMemoryPrimitives.h

Introduced the info about atomic/non-atomic write primitives

2023-11-29 14:30:07 +01:00

KernelPatternSearch.h

…

KernelUtils.h

…

ListUtils.h

…

MinifilterCallbacks.h

[new feature] Implements EDR minifilter callbacks detection and removal

2023-11-29 14:32:35 +01:00

NtoskrnlOffsets.h

DSE bypass : implemented "callback swapping" method

2023-11-03 15:13:36 +01:00

ObjectCallbacks.h

…

PdbParser.h

…

PdbSymbols.h

…

PEBBrowse.h

…

PEParser.h

PE parser: added a feature to parse a PE directly from kernel memory

2023-11-03 16:13:13 +01:00

PrintFunctions.h

…

ProcessDump.h

Various fixes (TCHAR/WCHAR confusions & handle leaks)

2023-11-29 17:41:10 +01:00

ProcessDumpDirectSyscalls.h

…

RemotePEBBrowser.h

…

RunAsPPL.h

…

SignatureOps.h

…

StringUtils.h

Various fixes (TCHAR/WCHAR confusions & handle leaks)

2023-11-29 17:41:10 +01:00

SW2_Syscalls.h

…

SyscallProcessUtils.h

Various fixes (TCHAR/WCHAR confusions & handle leaks)

2023-11-29 17:41:10 +01:00

Syscalls.h

…

Undoc_64.h

…

Undoc.h

…

UserlandHooks.h

…

WdigestOffsets.h

Various cosmetic changes

2023-11-29 00:03:46 +01:00

WindowsServiceOps.h

…