SSDTHook

  进程隐藏与进程保护（SSDT Hook 实现） 文章目录： 1. 引子 – Hook 技术 2. SSDT 简介 3. 应用层调用 Win32 API 的完整执行流程 4. 详解 SSDT 5. SSDT Hook 原理(SSDT Hook)

HookSSDT
........\Output
........\......\SSDT01.sys,5632,2012-05-29
........\......\SSDTProcess.exe,1805824,2012-05-29
........\SourceCode
........\..........\Ring0
........\..........\.....\SSDT01
........\..........\.....\......\SSDT01.c,10631,2012-05-29
........\..........\.....\......\SSDT01.h,7901,2012-05-29
........\..........\.....\......\SSDT01.reg,147,2011-08-15
........\..........\.....\......\SSDT01.sln,878,2011-08-15
........\..........\.....\......\SSDT01.vcxproj,6842,2012-05-28
........\..........\.....\......\SSDT01.vcxproj.filters,1349,2011-08-16
........\..........\.....\......\SSDT01.Win32.vddklaunch,704,2011-08-20
........\..........\.....\......\SSDTHook.c,1896,2012-05-29
........\..........\.....\......\SSDTHook.h,2311,2012-05-29
........\..........\.....\......\VisualDDKHelpers.h,1055,2011-08-15
........\..........\Ring3
........\..........\.....\SSDTProcess
........\..........\.....\...........\SSDTProcess
........\..........\.....\...........\...........\AboutDialog.cpp,2933,2012-05-29
........\..........\.....\...........\...........\AboutDialog.h,592,2011-09-04
........\..........\.....\...........\...........\ReadMe.txt,3089,2011-08-21
........\..........\.....\...........\...........\res




........\..........\.....\...........\...........\...\SSDTProcess.rc2,678,2011-08-21
........\..........\.....\...........\...........\resource.h,2444,2011-09-04
........\..........\.....\...........\...........\SSDTProcess.cpp,2011,2012-05-29
........\..........\.....\...........\...........\SSDTProcess.h,450,2012-05-29
........\..........\.....\...........\...........\SSDTProcess.rc,11636,2012-05-28
........\..........\.....\...........\...........\SSDTProcess.vcxproj,6345,2012-05-28
........\..........\.....\...........\...........\SSDTProcess.vcxproj.filters,2524,2012-05-28
........\..........\.....\...........\...........\SSDTProcessDlg.cpp,29440,2012-05-29
........\..........\.....\...........\...........\SSDTProcessDlg.h,3926,2012-05-29
........\..........\.....\...........\...........\stdafx.cpp,144,2011-08-21
........\..........\.....\...........\...........\stdafx.h,1616,2012-05-28
........\..........\.....\...........\...........\targetver.h,234,2011-08-21
........\..........\.....\...........\SSDTProcess.sln,900,2011-08-21