subhashdasyam/MalDocShield

WinAPI hooking library that protects against malicious Office documents & PDFs by monitoring suspicious activities. Intercepts critical system calls to detect and block malicious behaviors like file operations, process creation, registry changes, & network connections from document viewers. Includes configurable rules to minimize false positives

1 best points · 0 comments · 1 Hacker News post · 2 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: I built a DLL to stop Excel/Word from spawning PowerShell shells (1 points, 0 comments, by dxsecarch, 2026-01-10)