Basic Windows Kernel Programming +++ Tutorial

Visual Studio Configuration

1- General ==> Windows SDK Version ===> 10.0.10586.0

2- VC++ Directories ==> Include Directories = $(VC_IncludePath);$(WindowsSDK_IncludePath);

3- C/C++ ===> General ===> Additional Include Directories ===> C:\Program Files %28x86%29\Windows Kits\10\Include\10.0.17134.0\km;%(AdditionalIncludeDirectories)

4- Linker ===> Advanced ===> Entry Point ===> DriverEntry

5- Delete file .inf

Enable kernel debug Of registery

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\Deubug Print Filter\DEFAULT 0xf

Topics:

1- KeCPU
2- KeDateTime
3- KeDebug
4- KeJsonParser
5- KeMalloc
6- KeOSBuild
7- KeOSVersion
8- KeShellCode
9- KeString
10- KeThread
11- KeTimer
12- KeVector
13- KeHeapAlloc
14- KeFileWrite
15- KeFileRead
16- KeLinkList
17- KeSpinLock
18- KeWdmVersion
19- KeLongIntegerData

TODO

  - Advance Windows kernel Programming

Awesome Book by Pavel Yosifovich - https://leanpub.com/windowskernelprogramming