fkepro / oark Goto Github PK

Some improvements in the load and unload of the driver from user mode app.

I'll merge this into: 
/trunk

Purpose of new features:

Branch of new features: Detect hidden process - CsrWalker

When reviewing my code changes, please focus on:

After the review, I'll merge this branch into: /trunk

[deleted issue]

Purpose of new features:
Detect inline hooks on process/kernel modules

Purpose of code "Xrayn PoC Detection":

* Detects processes using "Xrayn" technic.

Branch of new features:
OARKXrayn/

After the review, I'll merge this branch into: /trunk

Purpose of new features:
Detect Sysenter hook.

Purpose of code pebhooking detection:

After the review, I'll merge this into:
/trunk

Purpose of new features: Detect IDT hooking

After the review, I'll merge this branch into: /trunk

Purpose of code Call Gates stuff.

After the review, I'll merge this branch into:
/trunk

Purpose of new features:

Call Gates Stuff and LDT Forward

Branch of new features: call_gates

After the review, I'll merge this branch into: /trunk

Purpose of code:

shows IDT info using kpcr, idt instructions ...

After the review, I'll merge this into:
/trunk

Purpose of code SSDT hooking detection:

* Detection of any hook in SSDT System / SSDT Shadow

After the review, I'll merge this branch into:
/trunk

Purpose of new features:
Detects IAT / EAT Hook

Branch of new features:
OARKEATIAT/

After the review, I'll merge this branch into: /trunk

Purpose of new features:
A global render API in order to homogenize OARK output.

No Branch for this new feature.

[deleted issue]

Purpose of code Only a Single Instance and only one handle to device

After the review, I'll merge into:
/trunk