Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

version 1.0.0 #6

Merged
merged 4 commits into from
Jun 10, 2024
Merged

version 1.0.0 #6

merged 4 commits into from
Jun 10, 2024

Conversation

rem0obb
Copy link
Contributor

@rem0obb rem0obb commented Jun 10, 2024

Features

  • Communicates with MalDec EDR
  • Modifies the Syscall Table and hooks it
  • Monitors if the Syscall Table has been modified
  • Restores the Syscall if it has been modified by an unknown driver
  • Monitors the CPU Control Registers and restores them if they are modified

Tests carried out

  • Distro Debian-Based
    • Ubuntu
    • Debian
  • Distro Arch-Based
    • Arch Linux
    • Artix
  • Kernel Version 6.0.0
    • 6.8.0-35-generic
    • 6.0.0-060000
  • Kernel Version 5.0.0
    • 5.0.5-050005-generic
  • Kernel Version 4.0.0

@rem0obb rem0obb merged commit ce45345 into main Jun 10, 2024
@rem0obb rem0obb deleted the version-1.0.0 branch June 10, 2024 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant