| name | windows-kernel-security |
| description | Analyze Windows driver trust, callbacks, IRQL, kernel memory, DSE, PatchGuard, VBS/HVCI, ETW, crash evidence, and build-specific internals for authorized game-security research. |
Windows kernel security
Match undocumented structures, offsets, globals, and allocator behavior to the exact Windows build and symbols. Separate documented contracts, observed state, and inference.
Topic routing
- Foundations and security for driver surfaces, symbols, PatchGuard, DSE, VBS/HVCI, and Secure Boot.
- Drivers and observation for callbacks, IRQL, APCs, driver structure, hooking, and ETW.
- Memory and forensics for pool architecture, memory access, dumps, and tools.
- Threats and virtualization for vulnerable drivers, boot threats, PatchGuard research, and hypervisor defenses.
- Repository resources and repository map for source selection.
Use dma-attack-techniques for device-originated memory access and game-security-research-rigor for version-sensitive conclusions.