过64位系统 PatchGuard The is just a showcase to decide whether EasyHook will be extended to kernel mode. The drivers will disable PatchGuard 2 and PatchGuard 3 on all current windows versions. I hope you enjoy exploring this special kind of

Windbg extension to find kernel pages allocated by PatchGuard. This program allows us to know how many PatchGuard contexts are running on a target environment and will help security researchers who want to analyze PatchGuard on their own.

Disable SSDT hooks protection by patching PatchGuard, Windows8/8.1 supported.