>_dkom.dev
posts about rss

# ioctl

  • 2025.10.20 Walking a Driver's IOCTL Dispatch by Hand

    Finding the IOCTL dispatch table in a stripped kernel driver, decoding CTL_CODEs from first principles, and the triage methodology I use in DriverDigger to prioritise …

    windowskernelreversingioctldrivers
© 2026 Emil Sorbroden / built with Hugo /rss