PI-Tracker. A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback hook and 'ProcessInstrumentationCallback' class to track all syscalls being performed via the userland.

github.com/paranoidninja/PI-Tracker

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.