Skip to main content

Module keyboard_notifiers

Module keyboard_notifiers 

Source
Expand description

Keyboard notifier chain forensics — keylogger detection.

Walks the keyboard_notifier_list (raw_notifier_head) linked list of notifier_block structures. Each entry records a notifier_call function pointer. A pointer outside the kernel text range indicates a potential keylogger injected by a rootkit.

Re-exports§

pub use crate::heuristics::classify_notifier;

Structs§

KeyboardNotifierInfo
Information about a single notifier_block on the keyboard notifier chain.

Functions§

walk_keyboard_notifiers
Walk keyboard_notifier_list and return all registered notifier blocks.