admin/zer0condition-Demystifying-PatchGuard
1
0
Fork 0
mirror of https://github.com/zer0condition/Demystifying-PatchGuard synced 2026-08-09 13:17:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
ZeroCondition
2023-04-13 15:59:43 +05:30
committed by GitHub
parent 914282021c
commit c0b6ebcfed
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -2,7 +2,7 @@
This repository contains some information for PatchGuard for Windows 11 (build 22000), to potentially help researchers, security professionals, and enthusiasts looking into PatchGuard for Windows 11.
<h2>KiFilterFiberContext/PatchGuardTVCallback.h</h2>
<p>This header file contains the decompiled notification callback function (a PatchGuard check routine) registered at the entry of 'KiFilterFiberContext' if 'PsIntegrityCheckEnabled' is greater than zero. It is very similar to the historical and well known verification routine 'FsRtlMdlReadCompleteDevEx' with some subtle differences</p>
<p>This header file contains the decompiled notification callback function (a PatchGuard check routine) registered at the entry of 'KiFilterFiberContext' if 'PsIntegrityCheckEnabled' is greater than zero. It is very similar to the historical and well-known huge verification routine 'FsRtlMdlReadCompleteDevEx' with some subtle differences</p>
<img src="https://i.imgur.com/ypKeYLd.png" alt="TVCallbackRegister">
---