Ставки поки відсутні
Ставки поки відсутні
Ставки приховані
-
Игорь Б. 14 січня 2025Under "preventing process termination" you mean ability to restart process immediately if terminated or to ban OS/User from terminating process?
-
Yahia Hamza
14 січня 2025
ban OS/User from terminating process, to give Access Denied
-
Игорь Б. 14 січня 2025
Well, guess you need custom OS build than :)
Quietly not sure this is technically possible to do it via driver
-
Yahia Hamza
14 січня 2025
anti-virus software can protect specific executables from being terminated or deleted, even when the user tries to do so manually. This is done through kernel-mode drivers that intercept and block certain system calls.
-
Игорь Б. 14 січня 2025
Yes, but the process can still be blocked from auto-launch on next system boot :)
-
Yahia Hamza
14 січня 2025
this is okay, there is no issue with this. this would be accepted 🙂
-
Yahia Hamza
14 січня 2025
check these examples:
https://github.com/Rhydon1337/windows-kernel-process-protector
https://github.com/SweetIceLolly/Kernel_Mode_Process_Protection -
Yahia Hamza
14 січня 2025
check these examples:
https://github.com/Rhydon1337/windows-kernel-process-protector
https://github.com/SweetIceLolly/Kernel_Mode_Process_Protection -
Yahia Hamza
14 січня 2025
like this one is also interesting
https://github.com/Rhydon1337/windows-kernel-process-protector