Reverse Engineering

TitanHide: Hiding kernel-driver for x86/x64

TitanHide is a driver intended to hide debuggers from certain processes. The driver hooks various Nt* kernel functions (using SSDT table hooks) and modifies the return values of the original...