c windows fuse filesystem-library dll dokan filesystem userland driver device-driver drivers dokan-library kernel-mode sys createfile fuse-wrapper

windows c-plus-plus visual-studio malware driver kernel-mode crash-dump windbg malware-analysis windbg-extension malware-research forensic-analysis debugging-tool memory-forensics anomaly-detection anti-rootkit wdbgark user-mode sww wa-haltables wa-idt wa-objtype wa-ssdt wa-colorize wa-checkmsr wa-pnptable wa-crashdmpcall wa-objtypecb swwwolf

unit-testing bdd driver test-framework header-only kernel-mode

macos kext kernel-mode sparse-file

windows native driver process windows-kernel kernel-mode-driver kernel-mode wdk process-list driver-programming zwquerysysteminformation

linux kernel-module assembly read linux-kernel write kernel-mode syscalls nasm ring0 usermode nasm-assembly systemcalls ring3 systemcall ring-0 ring-3 privileged-instruction protection-ring privilege-levels

code remote codegenerator kernel-mode codegen remotecode-kernel codegeneration

c windows native driver kernel-mode-driver kernel-mode driver-programming eprocess

kernel multiboot operating-system x86 kernel-mode grub virtual-memory multitasking x86-32 user-mode

operating-system file-system kernel-mode virtual-memory-management io-system

c linux kernel-module driver linux-kernel kernel-mode-driver kernel-driver kernel-mode kernel-modules linux-kernel-module ece ntua lunix ntua-ece