Expand description
Keyboard notifier chain forensics — keylogger detection.
Walks the keyboard_notifier_list (raw_notifier_head) linked list of
notifier_block structures. Each entry records a notifier_call
function pointer. A pointer outside the kernel text range indicates a
potential keylogger injected by a rootkit.
Re-exports§
pub use crate::heuristics::classify_notifier;
Structs§
- Keyboard
Notifier Info - Information about a single
notifier_blockon the keyboard notifier chain.
Functions§
- walk_
keyboard_ notifiers - Walk
keyboard_notifier_listand return all registered notifier blocks.