leviathan-driver 0.3.0

Windows kernel-mode EDR/XDR driver framework in Rust - callbacks, filters, detection, forensics
1
2
3
4
5
6
7
8
9
10
11
12
13

//! Security Modules
//!
//! Advanced security capabilities for kernel-mode protection:
//! - ELAM (Early Launch Anti-Malware) driver support
//! - Anti-tampering and integrity verification
//! - APC injection for kernel-to-user communication
//! - Process/driver protection mechanisms
//! - Hook detection (SSDT, IDT, inline)

pub mod elam;
pub mod integrity;
pub mod apc;
pub mod hooks;