Pointer swaps HalPrivateDispatchTable to intercept syscall dispatches through CKCL trace.
- Works on Windows 10/11 (22H2–25H2)
- No PatchGuard issues
Credits: https://github.com/mapozyan/etw_hook
chvrs1122/HalPmc-SyscallHook
Folders and files
| Name | Name | Last commit date | ||
|---|---|---|---|---|