A forum for reverse engineering, OS internals and malware analysis 

Kernel-Mode Development

Forum for discussion about kernel-mode development.
Forum Statistics Last post
troubleshooting NDIS driver issues
by mrutyunjaya.m  - Fri Jul 13, 2018 9:00 am
0 Replies 
 2773 Views 		 by mrutyunjaya.m
 Fri Jul 13, 2018 9:00 am
Breakpoints matters?
by tangptr  - Thu Jul 05, 2018 9:57 am
2 Replies 
 3867 Views 		 by tangptr
 Mon Jul 09, 2018 2:56 am
Signing Windows User Mode Drivers
by mrutyunjaya.m  - Fri Jul 06, 2018 10:49 am
0 Replies 
 2716 Views 		 by mrutyunjaya.m
 Fri Jul 06, 2018 10:49 am
Question about FileSystem DeviceDriver
by nimaarek  - Tue Jun 12, 2018 10:01 pm
1 Replies 
 3304 Views 		 by Vrtule
 Thu Jun 14, 2018 12:47 pm
Is possible remove a file protected by a file system filter driver?
by Li Yong  - Mon Mar 19, 2018 3:18 am
13 Replies 
 18214 Views 		 by EP_X0FF
 Fri Jun 08, 2018 6:53 pm
Obtaining certificate and signing the driver for production
by grechkoed  - Thu May 17, 2018 8:55 pm
1 Replies 
 3291 Views 		 by Vrtule
 Fri May 18, 2018 7:09 am
need help Explain this code
by lwbkm  - Wed May 02, 2018 1:35 am
6 Replies 
 8051 Views 		 by lwbkm
 Thu May 03, 2018 10:04 am
how to delete driver file and still Keep communication
by lwbkm  - Sat Apr 28, 2018 4:51 am
10 Replies 
 12252 Views 		 by nullpointer
 Thu May 03, 2018 8:24 am
List process and count packets.
by Krzysiek  - Mon Apr 30, 2018 5:49 pm
1 Replies 
 3249 Views 		 by Vrtule
 Tue May 01, 2018 1:32 pm
Is possible to hide a connection using windows filtering platform (WFP) ?
by Shinji  - Wed Apr 11, 2018 1:14 pm
2 Replies 
 4333 Views 		 by Shinji
 Fri Apr 13, 2018 12:05 pm
How to Converting PWSTR to UNICODE_STRING in a Kernel Driver
by sharpmddr  - Sun Mar 18, 2018 5:28 am
2 Replies 
 4285 Views 		 by Vrtule
 Sun Mar 18, 2018 7:26 pm
ObRegisterCallbacks return 0xC0000022 error
by Cuidightheach  - Thu Feb 22, 2018 8:28 am
2 Replies 
 4478 Views 		 by Brock
 Thu Feb 22, 2018 10:27 pm
Undocumented structures for W2k-Win10
by rkhunter  - Fri Aug 12, 2011 4:04 pm
21 Replies 
 76423 Views 		 by rkhunter
 Sat Jan 13, 2018 7:14 am
How to redirect registry key in registry callback?
by myid  - Tue Dec 19, 2017 2:04 pm
4 Replies 
 8743 Views 		 by myid
 Thu Dec 21, 2017 7:28 am
Allocate virtual system space page at specified base address
by chanselisee  - Sat Dec 02, 2017 12:06 am
2 Replies 
 5906 Views 		 by chanselisee
 Sat Dec 02, 2017 2:03 pm
IoCallDriver return STATUS_PENDING, will it BSOD if NOT wait
by myid  - Sat Nov 25, 2017 8:35 pm
19 Replies 
 19137 Views 		 by myid
 Thu Nov 30, 2017 1:14 pm
How to complete the pending IRP immediately?
by myid  - Mon Nov 27, 2017 6:59 am
2 Replies 
 4717 Views 		 by myid
 Mon Nov 27, 2017 9:06 am
WIN64 Driver Development Basic Tutorial
by m5home  - Fri Jun 13, 2014 9:18 am
19 Replies 
 44189 Views 		 by myid
 Sun Nov 26, 2017 4:47 am
Invalid ProcessId in LoadImageNotifyRoutine
by InUrFace  - Tue Nov 21, 2017 1:12 pm
2 Replies 
 5103 Views 		 by Brock
 Wed Nov 22, 2017 1:28 pm
The NT Insider: July/August 2015 Issue
by rkhunter  - Fri Mar 22, 2013 7:47 am
7 Replies 
 28563 Views 		 by Vrtule
 Tue Oct 03, 2017 6:50 pm
Some create process notifications cannot be removed
by myid  - Mon Oct 02, 2017 1:16 am
6 Replies 
 10871 Views 		 by tangptr
 Tue Oct 03, 2017 4:39 pm
How to map an address on specified 4GB space?
by fsdhook  - Wed Sep 13, 2017 3:07 am
2 Replies 
 10854 Views 		 by fsdhook
 Sun Sep 24, 2017 4:11 pm
process id type
by grechkoed  - Fri Jun 09, 2017 2:56 pm
5 Replies 
 12502 Views 		 by Vrtule
 Sat Sep 09, 2017 8:49 am
Very Simple Question: How to read any kernel address safely?
by myid  - Tue Jul 18, 2017 6:23 am
7 Replies 
 15367 Views 		 by myid
 Sun Sep 03, 2017 2:31 am
Reading pageable memory at HIGH_LEVEL
by pwl  - Fri Jul 07, 2017 6:22 pm
3 Replies 
 8479 Views 		 by Vrtule
 Sat Sep 02, 2017 2:38 pm
  • 1
  • 2
  • 3
  • 4
  • 5
  • 14
 Return to Board Index