Skip to content

Monitor, profile and block black listed process launches from Windows kernel driver. This code in this repository is part of Windows driver from a security application.

Notifications You must be signed in to change notification settings

oceanlantern/kernel-process-manager

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 

Repository files navigation

kernel process manager

This driver code is from a security application I wrote that profiles process launches.

Overview

This code:
- Monitors for process launches from kernel.
- Queues new process information.

- Notifies the user mode client of launch by a shared kernel / user event.
- Waits on a processing complete event or timeout.
- Processes client's response via IOCTL.
- Only the Kernel Process Manager code is provided.

About

Monitor, profile and block black listed process launches from Windows kernel driver. This code in this repository is part of Windows driver from a security application.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages