Record · corpus.blog/posts/01a0871d-1a7f-7306-a5a5-e308f8fdf959

Kernel Drivers, Process Protection, and ...Bears?

0xv1n.github.io · published 22 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at 0xv1n.github.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 19
Words captured: 2,875

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://twitter.com/_RastaMouse

twitter.com

https://github.com/gentilkiwi

github.com

https://learn.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services-

learn.microsoft.com

https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/ns-processthreadsapi-process_protection_level_information

learn.microsoft.com

https://www.vergiliusproject.com/kernels/x86/Windows%208.1/RTM/_PS_PROTECTION

vergiliusproject.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/

learn.microsoft.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/eprocess

learn.microsoft.com

Practical Design Patterns: Opaque Pointers and Objects in C Read at the source ↗

interrupt.memfault.com

https://www.linkedin.com/in/nicholas-miller-666a37b7/

linkedin.com

https://imphash.medium.com/windows-process-internals-a-few-concepts-to-know-before-jumping-on-memory-forensics-823d72d4d7b8

imphash.medium.com

https://www.zeropointsecurity.co.uk/

zeropointsecurity.co.uk

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-pslookupprocessbyprocessid

learn.microsoft.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-obreferenceobjectbyhandle

learn.microsoft.com

https://www.vergiliusproject.com/kernels/x64/Windows%2011/21H2%20(RTM

vergiliusproject.com

https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-pslookupprocessbyprocessid

docs.microsoft.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-obdereferenceobject

learn.microsoft.com

https://twitter.com/0xv1nx0

twitter.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/eprocess)

learn.microsoft.com