Basic Windows Kernel Programming +++ Tutorial

Visual Studio Configuration

1- General ==> Windows SDK Version ===> 10.0.10586.0
2- VC++ Directories ==> Include Directories = $(VC_IncludePath);$(WindowsSDK_IncludePath);
3- C/C++ ===> General ===> Additional Include Directories ===> C:\Program Files %28x86%29\Windows Kits\10\Include\10.0.17134.0\km;%(AdditionalIncludeDirectories)
4- Linker ===> Advanced ===> Entry Point ===> DriverEntry
5- Delete file .inf

Enable kernel debug Of registery

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\Deubug Print Filter\DEFAULT 0xf

Topics:

1- KeCPU

2- KeDateTime

3- KeDebug

4- KeJsonParser

5- KeMalloc

6- KeOSBuild

7- KeOSVersion

8- KeShellCode

9- KeString

10- KeThread

11- KeTimer

12- KeVector

13- KeHeapAlloc

14- KeFileWrite

15- KeFileRead

16- KeLinkList

17- KeSpinLock

18- KeWdmVersion

19- KeLongIntegerData

TODO

  - Advance Windows kernel Programming

Awesome Book by Pavel Yosifovich - https://leanpub.com/windowskernelprogramming