tandasat/MemoryMon

Detecting execution of kernel memory where is not backed by any image file

1 best points · 0 comments · 1 Hacker News post · 263 GitHub stars · View on GitHub

Hacker News discussions

• MemoryMonRWE – Detect Execution of Kernel Memory via EPT (Extended Page Table) (1 points, 0 comments, by peter_d_sherman, 2018-04-14)