Integrity Protection Driver (IPD)

System calls intercepted by the IPD:

ZwOpenSection

ZwMapViewOfSection

NtAdjustPrivilegesToken

ZwSetInformationToken

ZwCreateProcess

ZwOpenProcess

ZwOpenKey

ZwCreateKey

ZwSetValueKey

ZwOpenFile

ZwCreateFile

ZwSetSystemInformation

 

Copyright © 1997-2000 by Pedestal Software, LLC. All rights reserved. Intact, NT Command-line Security Utilites and Security Expressions are trademarks of Pedestal Software, LLC. All other trademarks are the property of their respective owners and are used here in an editorial context without intent of infingement. For comments and questions email webmaster@pedestalsoftware.com.