<index> / wazabiedr
┌───────────────────────┐
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
│ │
┌───────────────────────────────────────────────────────────│ │
│ wazabiedr - building an EDR in Rust, part by part │ │
│ CONTENTS └───────────────────────┘
│ │
│ E.0 Building WazabiEDR — Intro ...................................... lululufr │
│ E.1 Part 1 — A KMDF Driver Skeleton in Rust ......................... lululufr │
│ E.2 Part 2 — The Five Kernel Callbacks .............................. lululufr │
│ E.3 Part 3 — The Wire Format ........................................ lululufr │
│ E.4 Part 4 — The Ring Buffer and the Inverted-Call IOCTL ............ lululufr │
│ E.5 Part 5 — The User-Mode Agent .................................... lululufr │
│ E.6 Part 6 — The Server ............................................. lululufr │
│ E.7 Part 7 — The Plugin Protocol .................................... lululufr │
│ E.8 Part 8 — The Plugin SDK ......................................... lululufr │
│ E.9 Part 9 — Manifests and wedr-plugin .............................. lululufr │
│ E.10 Part 10 — Defender Bridge ....................................... lululufr │
│ E.11 Part 11 — Packaging and Deploy .................................. lululufr │
│ │
└──────────────────────────────────────────────────────────────────────────────────┘
──[ EOF ]──────────────────────────────────────────────────────────────────//───
Ring 0 is just Ring 3 with worse error messages.
Me
~ wazabiedr - building an EDR in Rust, part by part
CONTENTS
E.0 Building WazabiEDR — Intro
~ lululufr
E.1 Part 1 — A KMDF Driver Skeleton in Rust
~ lululufr
E.2 Part 2 — The Five Kernel Callbacks
~ lululufr
E.3 Part 3 — The Wire Format
~ lululufr
E.4 Part 4 — The Ring Buffer and the Inverted-Call IOCTL
~ lululufr
E.5 Part 5 — The User-Mode Agent
~ lululufr
E.6 Part 6 — The Server
~ lululufr
E.7 Part 7 — The Plugin Protocol
~ lululufr
E.8 Part 8 — The Plugin SDK
~ lululufr
E.9 Part 9 — Manifests and wedr-plugin
~ lululufr
E.10 Part 10 — Defender Bridge
~ lululufr
E.11 Part 11 — Packaging and Deploy
~ lululufr
──────────
Ring 0 is just Ring 3 with worse error messages.
Me