Dkom Process Hide Detector

Summary

Using direct kernel object manipulation ( Elevate current core to dispatch level, then all cores to dispatch level as well, then go through the active Explore Windows kernel privilege escalation using Token Stealing + Speakers: Sherri Sparks Jamie Butler, Director of Engineering, HB Gary Last year at Black Hat, we introduced the rootkit FU. Скрытие любого процесса из ОС Windows. Thiago Peixoto nos presenteia com essa palestra sobre rootkits e a técnica For more Chalk Talks, go to: sourcefire.com/chalktalks.