search

XaFF-XaFF / Cronos-Rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
MIT License
857 stars 182 forks source link

Patchguard #3

Closed rakan-dev closed 2 years ago

rakan-dev commented 2 years ago

Is unlinking a process from ActiveProcessList trigger Patchguard ?

XaFF-XaFF commented 2 years ago

No, it is not triggering Patchguard