Plugin focus: NtRays

This is a guest entry written by Can Bölük. His views and opinions are his own and not those of Hex-Rays. Any technical or maintenance issues regarding the code herein should be directed to the author.

NtRays: Reversing Windows kernel, simplified

Windows kernel has changed a lot in the past few years, with the addition of Hypervisor enhancements, security mitigations, scheduler hints, and general performance optimizations, it has become much snappier and more secure. However, combined with inlining, this also …

addition author code entry focus hex hex-rays hypervisor kernel malware analysis opinions own plugin reversing technical windows windows kernel