14 - Device and Driver Objects
14 - Device and Driver Objects
EDR Internals – Research & Development
Module 1: EDR Fundamentals
Module 1: EDR Fundamentals
Module 2: EDR Research Methodology and Practical Analysis
Module 2: EDR Research Methodology and Practical Analysis
Module 3: Building EDR: Foundations
Module 3: Building EDR: Foundations
Module 4: Basic Kernel Driver
Module 4: Basic Kernel Driver
Module 5: Working with IRPs
Module 5: Working with IRPs
Module 6: Kernel Notifications and Callbacks
Module 6: Kernel Notifications and Callbacks
Module 8: EDR Bypass and Evasion
Module 8: EDR Bypass and Evasion
Module 9: Detection Techniques
Module 9: Detection Techniques
Students will learn the relationship between driver objects and device objects, and how they are used to represent kernel-mode functionality.