rootkit

Jul 10

Enhancing the Threat Intelligence AI Model with Technical Knowledge About Windows Kernel Mode Malware

Artem Baranov

In one of my earlier blogs, I introduced the so-called Windows Rootkit Techniques Matrix based on data from my Windows Rootkits and Bootkits Guide. The guide itself consists of a nested list of Windows kernel rootkit tricks mapped to two tables of rootkit and bootkit families sorted in...

posts rootkit

Mar 29

Introducing the Rootkit Techniques Matrix and updates to the Guide

Artem Baranov

Introduction Hello Last year, I published a white paper called “Windows Rootkits and Bootkits Guide”. The idea behind this document was to summarize kernel-mode techniques used by malware (rootkits and bootkits) to hide their presence in a compromised system. The guide also contains information...

rootkit ring 0 windows internals windows kernel