From b68c602b683377d1d33ce33cf36a6ff06679d151 Mon Sep 17 00:00:00 2001 From: mether049 Date: Thu, 12 Mar 2020 21:20:02 +0900 Subject: [PATCH] Update malware-tech_ref_and_memo.md --- malware-tech_ref_and_memo.md | 1 + 1 file changed, 1 insertion(+) diff --git a/malware-tech_ref_and_memo.md b/malware-tech_ref_and_memo.md index 25f4e5c..33f512b 100644 --- a/malware-tech_ref_and_memo.md +++ b/malware-tech_ref_and_memo.md @@ -93,6 +93,7 @@ to do... - 少なくともtrickbot,locky,emotet等では利用されていた
- LinuxにおけるHeaven's Gateについて - [Unlocking Heaven's Gate on Linux](https://redcanary.com/blog/heavens-gate-technique-on-linux/)
+ **ref:**
[Knockin’ on Heaven’s Gate – Dynamic Processor Mode Switching(2012-09)](http://rce.co/knockin-on-heavens-gate-dynamic-processor-mode-switching/)
[The 0x33 Segment Selector (Heavens Gate)](https://www.malwaretech.com/2014/02/the-0x33-segment-selector-heavens-gate.html)