
Windows kernel driver prototype that toggles process protection, adjusts process privileges, patches DSE policy, and manipulates AV/EDR kernel callbacks.
Windows driver developped following the zeropointsecuriry training, in order to understand kernel mechanisms, and user-land kernel land windows interaction.
The functionnalities implemented :