Files
youssefnoob003-SindriKit/docs/domains/primitives/syscalls/README.md
T
2026-06-22 12:38:04 +01:00

15 lines
819 B
Markdown

# Syscall Primitives
This directory details SindriKit's advanced system for extracting System Service Numbers (SSNs) and bypassing inline userland EDR hooks.
> [!WARNING]
> **Initialization Constraint:** The syscall pipeline requires setting up the NTDLL base address. `snd_set_ntdll()` (from `sindri/primitives/ntdll.h`) must be called prior to invoking any resolution function.
## Table of Contents
- [pipeline.md](pipeline.md)
Explains the cascading fallback mechanism used to evaluate multiple SSN resolution strategies sequentially.
- [gates.md](gates.md)
Provides technical breakdowns of the Hell's, Halo's, Tartarus', and VelesReek extraction techniques.
- [api_reference.md](api_reference.md)
Public API documentation for syscall resolvers, pipeline configuration, and the generic ASM invocation stub.