Driver-backed Windows kernel interface for VAD-tree inspection/manipulation, PTE relinking, and cross-process memory operations, with runtime symbol resolution from ntoskrnl's PDB.
cpp ipc reverse-engineering windows-kernel vad kernel-driver shared-memory red-team memory-forensics dbghelp pte windows-internals windows-security ntoskrnlexe pdb-symbols
-
Updated
Jun 21, 2026 - C