Reverse Engineering a Malicious Kernel Driver: Callback Injection, APC, and Remote Thread Injection
Reverse engineering a malicious kernel driver, analyzing its dispatch routines and hooks to understand the rootkit's capabilities and intent, with the tools and offsets documented.