5 ms·
Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routi
by 0x8BADF00D 7y ago
Isn’t it trivial to defeat this type of AC? Grant your program SeDebugPrivelege and open a handle to the AC process. Inject away. NOOP any memory scanning routines.
- pjc50 7y agoThey've usually thought of that level of the arms race.
- akx 7y agoThe... ring0 process?
- 0x8BADF00D 7y agoThat's a good point. It will be a bit harder, but not entirely impossible. Position independent code/memory layout will complicate any attempts to modify the AC.