Hook system calls, context switches, page faults and more.
Appears on
Quick read
Latest capture 2026-10-15 03:09
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
5 observed captures since 2026-06-24. Observed captures are shown by default.
Stars from first capture +24
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
ntoskrnl .data hooks for UM-KM communication
Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
Use hardware breakpoints to spoof the call stack for both syscalls and API calls
State-of-the-art native debugging tools
custom vectored exception handlers for x86 and x64
Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when attackers disable standard process notify callbacks.
