четверг, 28 июля 2016 г.

среда, 13 июля 2016 г.

FilterConnectionPorts

Under windows 10 there are some very strange objects in root directory
They are created by Filter Manager (fltmgr.sys) and is used for communication between user-mode applications and filesystem minifilters. Lets see how we can enumerate and dump this