No disrespect but Windows Internals 5th Edition first documented this :) and we let the teams at Microsoft know. I think it’s cool to resuscitate old tricks especially as the ecosystem has changed, but we even documented the flag name — people just didn’t realize the consequences
Just published a new article detailing a method allowing circumvention of integrity checks and the ability to supersede driver altitude limits in the kernel:https://revers.engineering/superseding-driver-altitude-checks-on-windows/ …
-
-
-
Honestly, never read the 5th edition! Read 6th and 7th, but I went ahead and added it to the references and a little addendum mentioning it. Thanks for letting me know!
Kraj razgovora
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.