mimikatz icon indicating copy to clipboard operation
mimikatz copied to clipboard

Published 20 hours ago • verified publisher icon gentilkiwi

[fix] !notifObject support for W10 1909 x64

Open jthuraisamy opened this issue 3 years ago • 0 comments

  • For Windows 10 1909 (x64), IoCreateDriver comes before ObCreateObjectType and does not result in a pattern match.
  • Changed the end address to PoCreateThermalRequest which is located after ObCreateObjectType in this version.

jthuraisamy avatar Jul 28 '20 15:07 jthuraisamy