youssefnoob003-SindriKit/docs/domains/primitives/syscalls/README.md

Syscall Primitives

This directory details SindriKit's advanced system for extracting System Service Numbers (SSNs) and bypassing inline userland EDR hooks.

Warning

Initialization Constraint: The syscall pipeline requires setting up the NTDLL base address. snd_set_ntdll() (from sindri/primitives/ntdll.h) must be called prior to invoking any resolution function.

Table of Contents

• pipeline.md Explains the cascading fallback mechanism used to evaluate multiple SSN resolution strategies sequentially.
• gates.md Provides technical breakdowns of the Hell's, Halo's, Tartarus', and VelesReek extraction techniques.
• api_reference.md Public API documentation for syscall resolvers, pipeline configuration, and the generic ASM invocation stub.