دوره ScorpioSoftware: Advance Windows Kernel Programming

The cyber security industry has grown considerably in recent years, with more sophisticated attacks and consequently more defenders. To have a fighting chance against these kinds of attacks, kernel mode drivers must be employed, where nothing (at least nothing from user mode) can escape their eyes. The course provides the foundations for the most common software device drivers that are useful not just in cyber security, but also other scenarios, where monitoring and sometimes prevention of operations is required. Participants will write real device drivers with useful features that can then be modified and adapted to their particular needs.The course includes tips and techniques employed by the instructor in their own projects, based on years of experience.

Syllabus

1. Windows Internals quick overview
2. The I/O System
3. Device Drivers Basics
4. The I/O Request Packet
5. Kernel mechanisms
6. Programming Techniques
7. Process and thread monitoring
8. Object and Registry notifications
9. File system mini filters
10. Windows Filtering Platform
11. Programming Techniques II
12. Introduction to KMDF

ScorpioSoftware: Advance Windows Kernel Programming