mirror of
https://github.com/thefLink/Hunt-Weird-Syscalls
synced 2026-06-24 08:41:12 +00:00
thefLink
17 lines
410 B
C++
17 lines
410 B
C++
#pragma once
|
|
|
|
#include "windows.h"
|
|
#include <vector>
|
|
|
|
#include "Helpers.h"
|
|
|
|
namespace Detectors {
|
|
|
|
extern std::vector<PCSTR> SyscallsAllowOpenProcess;
|
|
extern PCSTR SyscallAllowOpenThread;
|
|
extern PCSTR SyscallAllowSetThreadContext;
|
|
|
|
VOID DirectSyscall ( DWORD pid, HANDLE hProcess, std::vector<ULONG_PTR> stack );
|
|
VOID InDirectSyscall ( DWORD pid, HANDLE hProcess, std::vector<ULONG_PTR> stack, PCSTR );
|
|
|
|
} |