Skip to content

v0.3 - Kernel Event Queue

Choose a tag to compare

View all tags
@HalfTimeOfLife HalfTimeOfLife released this 30 Jul 12:44
· 32 commits to main since this release
v0.3
54f123a

Added a kernel-mode event queue used to buffer activity events before they're consumed (by the log writer in v0.4 onward).

Added

  • event_types.h: KDAMON_EVENT structure (type, timestamp, unique ID), KDAMON_EVENT_TYPE enum with TODO placeholders for future event types
  • event_queue.c/event_queue.h: ring buffer + spinlock, push/pop API, dropped events counter

Notes

  • Push/pop validated via a temporary in-driver test in DriverEntry (FIFO order, unique incrementing IDs, correct count after push/pop)
Assets 2
Loading