mirror of
https://github.com/jsecurity101/ProcCallback
synced 2026-06-08 15:09:11 +00:00
325 B
325 B
ProcCallback
An example of how a driver can register a handle creation callback.
Disclaimer
This is a proof-of-concept and is not meant to run on production machines
Installation
- bcdedit /set TESTSIGNING on
- sc.exe create ProcCallback binPath= <Path\to\ProcCallback.sys> type= kernel
- sc.exe start ProcCallback