search

nsacyber / BAM

The Binary Analysis Metadata tool gathers information about Windows binaries to aid in their analysis. #nsacyber
Other
153 stars 27 forks source link

Overuse of Kernel Mode #3

Open iadgovuser35 opened 5 years ago

iadgovuser35 commented 5 years ago

Right now, BAM almost completely operates in kernel mode since current operations involve networking and file reads and writes. It would behoove the longevity of BAM if BAM can operate more often in user mode.