security intrusion-detection hids kprobes anti-rootkit detect-porcess-injection dns-query-hook create-file-hook connect-hook execve-hook load-lkm-hook

windows c-plus-plus visual-studio malware driver kernel-mode crash-dump windbg malware-analysis windbg-extension malware-research forensic-analysis debugging-tool memory-forensics anomaly-detection anti-rootkit wdbgark user-mode sww wa-haltables wa-idt wa-objtype wa-ssdt wa-colorize wa-checkmsr wa-pnptable wa-crashdmpcall wa-objtypecb swwwolf

linux-kernel hypervisor linux-kernel-module anti-rootkit

rootkit malware-research malware-detection anti-rootkit rootkits rootkit-hunter