140
click to vote
CCS
2009
ACM
16 years 5 days ago
2009
ACM
Kernel-mode rootkits hide objects such as processes and threads using a technique known as Direct Kernel Object Manipulation (DKOM). Many forensic analysis tools attempt to detect...