搜索资源列表
探测Windows系统信息(Native API)vc++
- 探测Windows本机系统信息(Native API) 程序使用vc++开发，主要利用系统API函数完成获取系统信息的功能！-detect the Windows System Information (Native API) procedures using vc development, mainly use the system API completed the acquisition of information systems function!
如何编译Native API的示例代码
- 如何编译Native API的示例代码,有兴趣的朋友可以看一下-how compiler Native API sample code, interested friends can look at the
IATroot
- IATroot为一款以Hook IAT表中的输入函数为基础的一款RootKit，功能比较完整，其中自带一个Native API的开发库及源代码。-IATroot Hook to one to table the IAT input function-based one RootK it, more functional integrity, which own a Native API development libraries and source code.
SDTrestore
- Win32 Kernel Rootkits modify the behaviour of the system by Kernel Native API hooking. This technique is typically implemented by modifying the ServiceTable entries in the Service Descr iptor Table (SDT). 有关钩子-Win32 Kernel Rootkits modify the behavio
20060409
- 针对Windows 操作系统受到的越来越多的严重攻击,提出一种基于Native API 序列的多 步一致模型和指数迭代检测算法,实现了从内核空间检测Windows 操作系统中的异常入侵. 通过 设计内核虚拟设备来截获系统服务分配表,从而可实时地获取Native API 信息. 用被截获的正常 Native API 数据建立一步和二步一致模型,并以此描述进程的正常行为. 在检测过程中,通过指数 迭代检测算法,可对不断出现的Native API 的正常指数进行度量. 采用报警提取算法
进程文件关联
- 枚举进程所打开的文件，使用NATIVE API实现。
wlsample.rar
- Native Wifi - Windows Wlan API 示例,Native Wifi- Windows Wlan API Example
wifi
- 最新C#语言开发native wifi,在vs 2010下编译通过。-the newest sourcecode is used to develop the native wifi by C#
EnumInfo_NativeApi
- 利用Native API 获取进程和线程信息-Native API to obtain the use of process and thread information
NativeAPI_pdf_book
- native api windows 2000/NT, pdf book. -native api windows 2000/NT, pdf book.
HookNativeApi
- Hook Native API Method
cpu_usage_in_winnt
- 讲解如何利用NT Native API获取NT系统的CPU使用率(支持多核)-Explain how to use the NT Native API to obtain the CPU usage in NT system (supports multi-core)
Windows_NT(2000)_Native_API_Reference.pdf
- Windows NT(2000) Native API Reference
Windows-NT-Native-API
- Windows NT Native API
inline-hook
- 1． Hook之前的准备工作之一。 在这个软件中，总共hook了15个native api 函数。他们分别是： ZwOpenKey , ZwClose, ZwQueryValueKey, ZwDeleteKey, ZwSetValueKey, ZwCreateKey, ZwDeleteValueKey. ZwEnumerateValueKey,ZwRestoreKey, ZwReplaceKey, ZwTerminateProcess, ZwSetSecurityObject, Zw
Windows-NT-2000-Native-API-Reference
- 内核API帮助文档NativeAPIReference-Windows NT 2000 Native API Reference
Windows-2000-native-API-reference
- Windows 2000 native API reference
Windows-NT-2000-Native-API-Reference
- Windows NT 2000 Native API Reference
Defeating-Kernal-Native-API-Hookers
- Defeating Kernal Native API Hookers