Showing posts with label Hooking. Show all posts
Showing posts with label Hooking. Show all posts

Sunday, March 23, 2014

[infosecinstitute] Hooking the System Service Dispatch Table (SSDT)

Introduction

In this article we’ll present how we can hook the System Service Dispatch Table, but first we have to establish what the SSDT actually is and how it is used by the operating system. In order to understand how and why the SSDT table is used, we must first talk about system calls.