DriverScanner

Windows driver analysis tool that scans .sys files for imports of the ZwTerminateProcess and ZwUnmapViewOfSection API from the ntoskrnl.exe, identifying potential kernel-mode process termination vectors.

Build Instructions (Windows - CMD)

Prerequisites

• Python installed on Windows
• Python added to the system PATH

Compile the executable

Open Command Prompt (cmd) and run:

pip install pyinstaller

pyinstaller --onefile DriverScanner.py