/PPLProtection

Protect your process like ntoskrnl.exe

Primary LanguageC++GNU General Public License v3.0GPL-3.0

PPLProtection

Protect your process like ntoskrnl.exe

Supports Win10 19H1 - Win11 22H2

Protected Process Light (PPL) technology is used for controlling and protecting running processes and protecting them from infection by malicious code and the potentially harmful effects of other processes. These processes include:

  1. Shutdown / Terminate / Suspend / Freeze / Restart
  2. Stream deployment
  3. Access to virtual memory
  4. Debugging
  5. Copying of descriptors
  6. Changing the memory working set
  7. Changing and receiving information about the current state of the thread
  8. Impersonation of threads (running process threads under a different account)

Compile the project in Release x64, and load the driver with kdmapper.

image image