Antonio Cocomazzi
@splintercode.bsky.social
offensive security - windows internals - reverse engineering | X: https://x.com/splinter_code | Mastodon: https://infosec.exchange/@splinter_code | GitHub: https://github.com/antonioCoco | Blog: https://splintercod3.blogspot.com/
There is also another check later in IopQueryRegistryKeySystemPath that ensures the ImagePath is under the "System" key
December 13, 2024 at 4:11 PM
There is also another check later in IopQueryRegistryKeySystemPath that ensures the ImagePath is under the "System" key