Pinned Loading

1. wavestone-cdt/EDRSandblast wavestone-cdt/EDRSandblast Public

   C 1.5k 279

2. GhostMapperUM GhostMapperUM Public

   manual map unsigned driver over signed memory

   C++ 183 27

3. KDP-compatible-driver-loader KDP-compatible-driver-loader Public

   KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys

   C 132 28

4. RansomGuard RansomGuard Public

   anti-ransomware file-system filter

   C++ 48 8

5. WFPCalloutReserach WFPCalloutReserach Public

   research revolving the windows filtering platform callout mechanism

   C++ 22 6

6. KernelInjector KernelInjector Public

   PoC kernel to usermode injection

   C++ 60 12