https://dkom.dev/learn/windows-kernel-reversing-intro/the-kernel-mental-model/2026-06-24T00:00:00+01:00https://dkom.dev/courses/windows-kernel-reversing-intro/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/lab-setup/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/first-look-at-a-driver/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/device-objects-and-irps/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/tracing-the-call/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/finding-the-dispatch-routine/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/decoding-ioctl-codes/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/mapping-the-handlers/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/reversing-workflow/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/the-red-herring/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/bug-classes-method-neither/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/proving-the-primitive/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/kernel-telemetry/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/detection-patterns/2026-06-24T00:00:00+01:00https://dkom.dev/courses/2026-06-24T00:00:00+01:00https://dkom.dev/2026-06-24T00:00:00+01:00https://dkom.dev/learn/2026-06-24T00:00:00+01:00https://dkom.dev/learn/windows-kernel-reversing-intro/2026-06-24T00:00:00+01:00https://dkom.dev/posts/hypervisor-ept-hooks/2025-09-01T09:00:00+02:00https://dkom.dev/tags/evasion/2025-09-01T09:00:00+02:00https://dkom.dev/tags/hooking/2025-09-01T09:00:00+02:00https://dkom.dev/tags/hypervisor/2025-09-01T09:00:00+02:00https://dkom.dev/tags/kernel/2025-09-01T09:00:00+02:00https://dkom.dev/posts/2025-09-01T09:00:00+02:00https://dkom.dev/tags/2025-09-01T09:00:00+02:00https://dkom.dev/tags/windows/2025-09-01T09:00:00+02:00https://dkom.dev/posts/hypervisor-exit-handler/2025-07-28T09:00:00+02:00https://dkom.dev/tags/internals/2025-07-28T09:00:00+02:00https://dkom.dev/posts/hypervisor-primer/2025-06-23T09:00:00+02:00https://dkom.dev/tags/drivers/2025-05-12T09:00:00+02:00https://dkom.dev/posts/kernel-wsk-covert-comms/2025-05-12T09:00:00+02:00https://dkom.dev/posts/av-bisect/2025-04-07T09:00:00+02:00https://dkom.dev/tags/malware/2025-04-07T09:00:00+02:00https://dkom.dev/tags/reversing/2025-04-07T09:00:00+02:00https://dkom.dev/posts/ntfs-ads-self-deletion/2025-02-24T09:00:00+01:00https://dkom.dev/posts/anti-debug-telemetry/2025-01-20T09:00:00+01:00https://dkom.dev/posts/edr-kernel-callbacks/2024-11-04T09:00:00+01:00https://dkom.dev/posts/thread-start-address-inspection/2024-08-19T09:00:00+02:00https://dkom.dev/posts/edr-handle-stripping/2024-06-10T09:00:00+02:00https://dkom.dev/tags/injection/2024-03-25T09:00:00+01:00https://dkom.dev/posts/threadless-injection/2024-03-25T09:00:00+01:00https://dkom.dev/posts/mapviewoffile2-injection/2024-01-08T09:00:00+01:00https://dkom.dev/posts/function-stomping-injection/2023-10-16T09:00:00+02:00https://dkom.dev/posts/process-injection-early-bird/2023-07-31T09:00:00+02:00https://dkom.dev/tags/anticheat/2023-05-08T09:00:00+02:00https://dkom.dev/posts/pool-allocation-fingerprint/2023-05-08T09:00:00+02:00https://dkom.dev/posts/battleye-callback-interception/2023-02-20T09:00:00+01:00https://dkom.dev/posts/battleye-ob-callbacks/2022-12-05T09:00:00+01:00https://dkom.dev/tags/gamedev/2022-12-05T09:00:00+01:00https://dkom.dev/tags/byovd/2022-09-12T09:00:00+02:00https://dkom.dev/tags/edr-evasion/2022-09-12T09:00:00+02:00https://dkom.dev/posts/byovd-indpages/2022-09-12T09:00:00+02:00https://dkom.dev/posts/pe-signature-scanners/2022-05-30T09:00:00+02:00https://dkom.dev/tags/dse/2022-03-07T09:00:00+01:00https://dkom.dev/posts/dse-ci-patch/2022-03-07T09:00:00+01:00https://dkom.dev/posts/kernel-code-caves/2021-11-22T09:00:00+01:00https://dkom.dev/tags/memory/2021-08-30T09:00:00+02:00https://dkom.dev/posts/mmcopyvirtualmemory/2021-08-30T09:00:00+02:00https://dkom.dev/posts/inline-hook-x64-trampoline/2021-05-17T09:00:00+02:00https://dkom.dev/tags/ioctl/2021-02-01T09:00:00+01:00https://dkom.dev/posts/walking-a-drivers-ioctl-dispatch/2021-02-01T09:00:00+01:00https://dkom.dev/posts/eprocess-from-kpcr/2020-10-26T09:00:00+01:00https://dkom.dev/posts/ntloaddriver-vs-scm/2020-09-14T09:00:00+02:00https://dkom.dev/about/https://dkom.dev/til/