A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
-
Updated
Mar 26, 2019 - C
#
dkom
Here are 7 public repositories matching this topic...
Kernel-mode process protection driver with user GUI
kernel-driver kernel-mode dkom wdk windows-driver process-protection driver-development obregistercallbacks
-
Updated
Jan 7, 2026 - C++
PsLoadedModuleList Unlinking through DKOM Manipulation
-
Updated
Sep 27, 2025
A DKOM hiding stuff for Linux, FreeBSD and NetBSD.
-
Updated
Nov 14, 2021 - C
Project for Computer Forensics and Cyber Crime Analysis Exam @ Polito - An interactive forensic serious game for identifying anti-forensic techniques across filesystem, memory, and network domains.
network-forensics cybersecurity steganography digital-forensics dkom serious-game anti-forensics dns-tunneling file-carving slack-space cybersecurity-education cybersecurity-awareness icmp-exfiltration rootkit-detection process-hiding ram-analysis timestomping ntfs-attributes lsb-detection
-
Updated
May 8, 2026 - JavaScript
Improve this page
Add a description, image, and links to the dkom topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dkom topic, visit your repo's landing page and select "manage topics."