This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
The API Just a quick post about something I found quite interesting. In Windows 10 version 2004+ (according to this ) there is a new system call which caught my attention: NtPssCaptureVaSpaceBulk . Specifically the caputing “bulk” referenced in the name made me think it could be useful. Looking at the API in the kernel, I quickly noticed several calls using the PsProcessType type as the first…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.