Home

In one of my earlier blogs, I introduced the so-called Windows Rootkit Techniques Matrix based on data from my Windows Rootkits and Bootkits Guide.

In my previous blog, I tried to break down Tenet scenes using hand-drawn diagrams.

Hello.

Hello.

(Compared to the first version of this quiz, this one has been significantly visually redesigned and 40 new questions have been added.)

Introduction Hello Last year, I published a white paper called “Windows Rootkits and Bootkits Guide”.

Introduction After spending a year with Tenet and related material, including the documentary Looking at the World in a New Way: The Making of Tenet, Welby’s videos, the r/Tenet subreddit, and my own “real-life experiments”, I managed to grasp Tenet’s phy…

The end of the year is a good time to summarize some achievements of the year.

Okay, let’s skip the introduction and get straight to the guide.

Introduction As we know, Windows has a proprietary hybrid kernel, written in C, C++, and Asm, called ntoskrnl.exe (also ntkrnlpa.exe, ntkrnlnmp.exe, depending on the installed version).