开发者

Kernel APIs or using APIs in the kernel

开发者 https://www.devze.com 2023-02-02 14:05 出处:网络
I\'d like to know if and how I can access API calls inside the kernel. I need them to preform several integrity checks on a program of mine running in user mode. But I don\'t know how I can access the

I'd like to know if and how I can access API calls inside the kernel. I need them to preform several integrity checks on a program of mine running in user mode. But I don't know how I can access the APIs and function开发者_开发技巧s required to do so.

How do I obtain the process id of my user mode process? And how do I access all its memory to preform the check?

PS: I'm on a Windows XP machine.


Yes, you can do that by creating a kernel mode driver and then communicating with your user mode process from the kernel space. You can refer this document for detailed information.

0

精彩评论

暂无评论...
验证码 换一张
取 消