Connor McGarr (@33y0re) 's Twitter Profile
Connor McGarr

@33y0re

Software Engineer @preluderesearch

ID: 1160734131531243520

linkhttps://connormcgarr.github.io calendar_today12-08-2019 02:05:57

907 Tweet

9,9K Followers

90 Following

Connor McGarr (@33y0re) 's Twitter Profile Photo
Connor McGarr
@33y0re

23 days ago

I don't know which update specifically, but in a recent update of 24H2 it looks like the Win32k system call table is protected by Kernel Data Protection (read-only SLAT entry)! I believe CI!g_CiOptions and msseccore's SecKdpSe PE section were the only things using it before.

I don't know which update specifically, but in a recent update of 24H2 it looks like the Win32k system call table is protected by Kernel Data Protection (read-only SLAT entry)! I believe CI!g_CiOptions and msseccore's SecKdpSe PE section were the only things using it before.