/hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

Primary LanguageC

Hidden

This toolset is developed like as solution for my reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hidding specific environment on VMs, like installed rce programs (ex. procmon, wireshark), vm infrastracture (ex. vmware tools) and etc.

Features

  • hide registry keys and values
  • hide files and directories
  • protect specific processes using ObRegisterCallbacks
  • exclude specific processes from hidding and protection features
  • usermode interface (lib and cli) for working with driver

and so on

Recommended build environment

  • Visual Studio 2013 and above
  • Windows Driver Kit 8.1