108
Voted
CCS
2009
ACM
15 years 9 months ago
2009
ACM
Kernel-mode rootkits hide objects such as processes and threads using a technique known as Direct Kernel Object Manipulation (DKOM). Many forensic analysis tools attempt to detect...