[lorddoskias]

Hello,

Has anyone by any chance seen or knows how sandboxie performs what it does - what type of modification it does to the operating system? Also, any research on the experimental support they offer for the 64 bit version of windows without disabling KPP?

[EP_X0FF]

Hello,

DKOH + some trivial splicing.
On x64 systems it splice win32k.sys http://www.kernelmode.info/forum/viewto ... 7&start=10

[Buster_BSA]

Sandboxie. Process isolation with kernel hooks.

http://vallejo.cc/?p=48