| Description: |
In these tools, we use some new tech called mirror system (pretty cool, we hope it worth the name ;p). We mirrored the kernel file, file system driver file, and it can do more. We think the effect is that there will be no more hook(code hook, not include data hook, like NDIS or registry hive hook, for now). Maybe hook is end of the road. RUK is powerful, but we dontt need to restore the hooked code and the FSD filter also is not a problem, that may lower the risk. We think its a more stable method, all the system call from the tools through an privacy copy of kernel, of cource the runtime kernel data still the same :>
|
