yardenshafir

Show mitigation policies marked in LdrSystemDllInitBlock.MitigationOptionsMap.Map[1] and [2]

4

### Description of the feature, modification, idea or suggestion Map[1] and [2] contains settings for loader integrity continuity, module tampering protection, XFG, CET, etc. There is some commented out code...

Add the option to use with a live local/remote kernel debugging session: - Connect to local/remote kernel debugger session and present some basic pool data (can probably not show all...

Fields: Tag, number of allocations, total memory consumed (by allocated/free blocks), number of allocated, number of free, average size for allocated block, average size for free block

Adapt WNF injector to Windows 10

2

In Windows 10/11 the NamesTableEntry of the WNF_SUBSCRIPTION_TABLE isn't a list anymore, instead it's a tree. Handling should be adjusted based on the system build (not sure exactly what build...