55-AA
55-AA
Sorry, My logs is prone to confusion, I redo it as follow: ``` INT3 event vCPU 0 altp2m:1 CR3: 0x185000 PA=0x40ba2b9 RIP=0x840ba2b9. Insn_length: 1 rax=18c, rcx=0, rdx=840ba2b2, rbx=840ba2b2, rsi=96b93ae4, rdi=96b93a48,...
Now, int3 and cpuid event were uesed in my test code. In order to avoid interference, all of other event have been disabled except int3 and cpuid event. The cpuid...
I done another test by calling NtCreateProcessEx with 5000 threads and monitor it, the result is pefected, the condition is not found. (NtCreateProcessEx is a discarded ntapi by win7, system...
@SecureStack Inline hook.
Hi, I've done a lot of experiments recently, and found that triggering a DMA transfer will spend a larger of cycles. So, I think if hardware can process mulit-packets at...