3 Commits

Author	SHA1	Message	Date
nganhkhoa	72a947ccd7	Update scan algorithm ... - Scan _ETHREAD with PoolTag='Thre' - Parse pid/ppid from _EPROCESS - Build process tree from output log - Static link for machine missing Windows C++ dev environment	2020-06-09 04:13:15 +07:00
nganhkhoa	8c642f6ba0	add dump test 1	2020-06-05 19:37:13 +07:00
nganhkhoa	4bf2bb71ff	check read access when dump file name in _FILE_OBJECT	2020-05-29 01:39:32 +07:00