Velum v0.1.0

Velum v0.1.0

Velum is a Windows x64 hypervisor built with Intel VT-x and per-CPU EPT. This
release includes the driver and interactive console for native-call observation,
kernel telemetry and request-policy experiments.

Features

• EPT hooks for available Nt and Ex/Mm entries, with hardware instruction replay.
• Live console and DebugView telemetry, numeric filters and module/tag summaries.
• Scoped request denial and access-right reduction for supported operations.
• CPUID identity configuration and fixed TSC offsets with deadline translation.
• Per-CPU diagnostics, CET-aware transitions and coordinated native shutdown.

Tested on Windows 10 22H2 and Windows 11 26H2.

The runtime uses selective interception, per-CPU state, preallocated EPT reserves
and deferred log formatting. A roughly 1,000-line x64 assembly layer handles
architectural state transfer. The binaries are optimized Release builds with
runtime telemetry enabled and debug symbols excluded.

Download

Windows x64 ZIP contains velum.sys and velum-console.exe.
Both files are also available separately below. SHA256SUMS.txt covers the binaries
and ZIP archive.

The driver is unsigned. Follow the Windows and VMware setup guide
for VT-x/EPT requirements, guest configuration and temporary F7 loading.

Technical write-up | Usage guides