search

myzxcg / RealBlindingEDR

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...
MIT License
928 stars 171 forks source link

驱动hash修改了，但是加载驱动被拦截如何解决，大佬求教 #8

Closed INotGreen closed 8 months ago

INotGreen commented 8 months ago

image

INotGreen commented 8 months ago

通过调试发现，在这一行被拦截（已经开启核晶模式）

image

myzxcg commented 8 months ago

此驱动已黑，等待发布新驱动

INotGreen commented 8 months ago

主要是加载驱动的方法公开了