diff --git a/malware-tech_ref_and_memo.md b/malware-tech_ref_and_memo.md index 25f4e5c..33f512b 100644 --- a/malware-tech_ref_and_memo.md +++ b/malware-tech_ref_and_memo.md @@ -93,6 +93,7 @@ to do... - 少なくともtrickbot,locky,emotet等では利用されていた
- LinuxにおけるHeaven's Gateについて - [Unlocking Heaven's Gate on Linux](https://redcanary.com/blog/heavens-gate-technique-on-linux/)
+ **ref:**
[Knockin’ on Heaven’s Gate – Dynamic Processor Mode Switching(2012-09)](http://rce.co/knockin-on-heavens-gate-dynamic-processor-mode-switching/)
[The 0x33 Segment Selector (Heavens Gate)](https://www.malwaretech.com/2014/02/the-0x33-segment-selector-heavens-gate.html)