Hey there, I'm trying to predict the dirbase for ntoskrnl.exe. I definitely think this is possible because on restart my dirbase doesn't change, it seems like only on different Windows builds there are different dirbases. By the way, I'm trying to predict from usermode, not from kernel. Anyone have any ideas?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||4 Feb 2019||OSR Seminar Space|
|Writing WDF Drivers||25 Feb 2019||OSR Seminar Space|
|Kernel Debugging and Crash Analysis||25 Mar 2019||OSR Seminar Space|