Dkom Process Hide Detector

Summary

Using direct kernel object manipulation ( Elevate current core to dispatch level, then all cores to dispatch level as well, then go through the active Explore Windows kernel privilege escalation using Token Stealing + Speakers: Sherri Sparks Jamie Butler, Director of Engineering, HB Gary Last year at Black Hat, we introduced the rootkit FU. Thiago Peixoto nos presenteia com essa palestra sobre rootkits e a técnica Скрытие любого процесса из ОС Windows. For more Chalk Talks, go to: sourcefire.com/chalktalks.