If Alex happens to drop by: what happened to DriverMon? Clearly Alex has been very busy but he mentioned the GUI-fication of the tool was being handled by his c

If Alex happens to drop by: what happened to DriverMon? Clearly Alex has been very busy but he mentioned the GUI-fication of the tool was being handled by his co-worker Robin Keir. "Abusing the NT Kernel Shim Engine" by Alex Ionescu at REcon 2016 (October) https://www.youtube.com/watch?v=qCa9icMqBNM?t=48m55s https://www.youtube.com/watch?v=qCa9icMqBNM?t=48m55s a tool called DriverMon is planned for release at the conference, which uses the KSE to provide ProcMon for Drivers Will be available from https://www.crowdstrike.com/resources/community-tools/ https://www.crowdstrike.com/resources/community-tools/ Will announce release on Twitter in a few weeks -- Waiting for this has reinforced my belief that vaporware (or whatever is preventing the release of this tool) has served as the best deterrent preventing anyone else from running with this undocumented tech!