Windows kernel mode driver using Intel's hardware virtualization to hook MSR_LSTAR (system call handler). Currently bypasses PatchGuard on Windows 8.1.
troyxyz / virtualdbghide Goto Github PK
View Code? Open in Web Editor NEWThis project forked from nukem9/virtualdbghide
Windows kernel mode driver to prevent detection of debuggers.