cuckoosandbox / cuckoomon

DEPRECATED - replaced with "monitor"
122 stars 82 forks source link

More hooks #1

Closed jbremer closed 11 years ago

jbremer commented 12 years ago

More networking stuff

Other stuff

Besides that, a bunch of functions should be hooked on a lower level, such as hooking NtResumeThread instead of ResumeThread.

Also hook e.g. VirtualAlloc in order not to confuse a beginner with the Process Handle in VirtualAllocEx, or convert such functions to their simpler variant while processing.

Do not close this issue, instead, keep it alive so anyone can add hook requests.