Unpacking VMProtect is rather straightforward and there are many ways in which it is documented for userland processes -

In Part II of this series, we looked at how we could be hiding our rootkit’s thread from the eyes of a vigilant anti-roo

At the end of Part I of this Series, we ended up with a small anti-rootkit driver, that was able to detect malicious dri

While some blog posts exist that talk about developing offensive drivers and rootkits, the only ones that I found, which

If you are into rootkits and offensive windows kernel driver development, you have probably watched the talk Close Encou