Questions and tasks for Windows LL Interview

NTDEV
1

Hi everyone,

I’m not sure if this is the right place to ask, my apologies if it isn’t.

I have an interview in a few days for a Windows low-level engineering position at a cybersecurity company. While I have a solid grasp of Windows internals, my driver development experience is mostly self taught and not part of my day-to-day work.

Could you suggest some small projects both kernel-mode (drivers) and user-mode that I could build to sharpen my skills before the interview?

This is my first time interviewing specifically for a Windows low-level role, so I don’t yet know what kinds of coding questions to expect.

Thanks in advance for any guidance!

2

For the interview preparation, IMHO you should not worry too much.
You've already been selected for the interview.
Just be young, open minded and ready for typical "psychotest" challenges.

This forum historically is not too friendly to cybersecurity theme. It is more about traditional "white hat" kernel and driver development topics. The cyber folks look upside down at this, considering it too pedestrian or botanic. Anyway - refresh on following:

  • The IRQL concept
  • Memory allocation functions (if you know KMDF, read also on 'old WDM' functions)
  • Synchronization objects and functions (ditto)
  • Ways to hook or intercept things interesting for your employer (running some applications, accessing files, filtering network connections, blocking various devices, making or blocking screenshots...) .
  • General understanding of code integrity and secure boot in Windows

If you have time, take a look on some github projects such as ProcessHacker.
Good luck.

3

Honestly, if I'm hiring someone, I want to know what they KNOW, not what they can cram in the last 24 hours. As a programmer, I know all of the details can be looked up online, as long as you have the basics.