This is a very interessting tool I did one year ago to realize proof of concept of my IDT authenticity theory. Tool can be found at : IDTGuard v0.1 Note: This tool doesn’t work with Windows 2003 SP1 cause I used \\PhysicalMemory. (http://technet2.microsoft.com/WindowsServer/en/library/e0f862a3-cf16-4a48-bea5-f2004d12ce351033.mspx?mfr=true The following paste is a sample of use with the 0x2D interrupt [ Read More ]
