Month: <span>August 2017</span>

Every Windows processes represented by an executive process block (EPROCESS). This block contains a lot of information about process and pointers to related structures such as ETHREAD, PEB, Pcb structures.…

Operating System Reverse Engineering