This is the fourth part of the WRK series. For your convenience you can find other parts in the table of contents in Part 1 — Compiling and debugging To create a new module, you need to prepare some directories and a make file. First, create the following structure in base\ntos Next, in module\BUILD\ put … Continue reading Windows Research Kernel Part 4 — New module

This is the third part of the WRK series. For your convenience you can find other parts in the table of contents in Part 1 — Compiling and debugging Today we are going to write a very simple hello world in the kernel space. Let’s go. Kernel First, we need to add new syscall to … Continue reading Windows Research Kernel Part 3 — Syscall

This is the second part of the WRK series. For your convenience you can find other parts in the table of contents in Part 1 — Compiling and debugging In this part we are going to monitor the invocation of QuerySystemInformation system function by using the debugger. First, make sure that you can debug the … Continue reading Windows Research Kernel Part 2 — Monitoring the function invocation