Translation “Patchguard alternative theory” presentation.
 Matthieu Suiche (msuiche) <matt msuiche net> |
Sunday, December 24 2006 13:10.56 CST |
http://www.msuiche.net/2006/12/24/translation-of-my-patchguard-alternative-theory-presentation/
I did a translation into English of my previous presentation which explain how to realize a protector for IDT, SSDT, and syscall address on Windows 32 and 64bits. This could be see as a kind of alternative to Patchguard.
The translation can be found at the following link : http://www.msuiche.net/pres/Windows%20Vista%20Kernel%20Security%20-%20[EN].ppt
I’m writting an article about it which will be released very soon.
Happy merry xmas !
Comments
| Posted: Wednesday, December 31 1969 18:00.00 CST | |