Windows kernel security

Match undocumented structures, offsets, globals, and allocator behavior to the exact Windows build and symbols. Separate documented contracts, observed state, and inference.

Topic routing

• Foundations and security for driver surfaces, symbols, PatchGuard, DSE, VBS/HVCI, and Secure Boot.
• Drivers and observation for callbacks, IRQL, APCs, driver structure, hooking, and ETW.
• Memory and forensics for pool architecture, memory access, dumps, and tools.
• Threats and virtualization for vulnerable drivers, boot threats, PatchGuard research, and hypervisor defenses.
• Repository resources and repository map for source selection.

Use dma-attack-techniques for device-originated memory access and game-security-research-rigor for version-sensitive conclusions.