Hacking Livestream #31: Windows Kernel Debugging Part IV

Artem "honorary_bot" Shishkin is a fan of Windows RE, debugging and low-level stuff. He's been using WinDbg for kernel debugging for several years now for fun, customizing BSODs, building Windows kernel source tree or boot dependencies graph. Sometimes he might also accidentally discover such things as SMEP bypass on Windows 8 or how to disable PatchGuard in runtime. Being a great fan of Intel and specifically VMX technology he maintains his own bicycle debugger based on a bare metal hypervisor.
Twitter handle: https://twitter.com/honorary_bot
Github: https://github.com/honorarybot/

Links:
https://www.intel.com/content/www/us/en/processors/core/4th-gen-core-family-desktop-vol-1-datasheet.html
https://www.intel.com/content/www/us/en/processors/core/4th-gen-core-family-desktop-vol-2-datasheet.html
http://www.uefi.org/
http://wiki.osdev.org/Detecting_Memory_(x86)
https://www.intel.com/content/www/us/en/chipsets/8-series-chipset-pch-datasheet.html
http://www.acpi.info/
https://rweverything.com/
https://www.intel.com/content/dam/www/public/us/en/documents/technical-specifications/ehci-specification-for-usb.pdf

Видео Hacking Livestream #31: Windows Kernel Debugging Part IV канала GynvaelEN