|
|
#16
02-06-2014, 05:39
|
|||
|
|||
|
Hm,
So I would have to enum all handles in order to check if the used handle is valid? Maybe it's easier to remove the exception that is added to the chain after a process to hide and an exception is found. Maybe it's possible to use NtDuplicateHandle to check if the handle is valid?? I will check all this. Greetings 
|
| Tags |
| driver, hiding, ssdt, titanhide, x64 |
|
|
Threaded Mode