GitHub - eltavine/UserDrivenKernelAgent: Windows kernel-mode minifilter driver providing process monitoring, memory inspection, filesystem/registry access control with user-mode approval workflows, DLL injection (APC + manual map), hardware fingerprinting, and driver self-concealment. Communicates via unnamed shared memory ring buffers

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
utils		utils
.gitattributes		.gitattributes
.gitignore		.gitignore
UserDrivenKernelAgent.inf		UserDrivenKernelAgent.inf
UserDrivenKernelAgent.slnx		UserDrivenKernelAgent.slnx
UserDrivenKernelAgent.vcxproj		UserDrivenKernelAgent.vcxproj
UserDrivenKernelAgent.vcxproj.filters		UserDrivenKernelAgent.vcxproj.filters
agent_comm.c		agent_comm.c
comm.c		comm.c
commit.txt		commit.txt
core.c		core.c
core.h		core.h
edr_shared.h		edr_shared.h
fs.c		fs.c
hwid.c		hwid.c
mem.c		mem.c
proc.c		proc.c
reg.c		reg.c
stealth.c		stealth.c

About

Windows kernel-mode minifilter driver providing process monitoring, memory inspection, filesystem/registry access control with user-mode approval workflows, DLL injection (APC + manual map), hardware fingerprinting, and driver self-concealment. Communicates via unnamed shared memory ring buffers