Jan 26
I've tried something new! I have streamed some unfiltered coding, writing a module to detect malicious bytes in a shellcode injection scenario for an EDR that would use the System Call Integrity Layer project: youtube.com/watch?v=gK4OXh6l…
If this content is useful, or you like it, please let me know and give me some ideas what you would want to see! I want to grow in myself and help produce content that would be beneficial for our amazing cyber community!
#blueteam #cybersecurity #redteam #driver #rust #rustlang #infosec #rustdriver #soc #cyber #cti #informationsecurity #infosec
1
17
67
6,239
Jan 22
Almost at the end of the immediate R&D phase of the SCIL mini-project :~). We queue a tonne of IO events (irp's) in the driver and use these to immediately signal to the EDR in user-mode that there has been a system call, without needing to hook NTDLL, so the EDR can (in userland) inspect what a process is doing at runtime. That was the motivation of the project.
The next immediate step is to suspend execution and wait for a decision by the user-mode EDR component.
Once this is finished, I can polish it up, deploy it system wide and start getting some metrics as to whether it degrades system performance, or whether it is within acceptable margins for environments an EDR would operate in. All of course, metrics judged by me, someone who does not work for an EDR company ^^.
After this is complete, I can write up my findings, maybe a few blog posts on the implementation detail around some of the driver components in Rust (as there were no existing examples of such). THEN I can get back to hitting my Wyrm V1.0 official release which is not far off!
Quite a few things to hit for Wyrm to get it to 1.0, but the end is in sight, then I can begin progressing the milestones towards 1.1, 2.0 and beyond!
All in all, so far, this has been a fun little project! ^_^
#blueteam #redteam #cyber #infosec #cybersecurity #windowsdriver #rustdriver #edr #rust #rustlang
1
5
47
3,373
11 May 2025
Ok - pulling out all the args now (only showcasing for NtAllocateVirtualMemory). Here is the syscall hooks that I'm monitoring in the alt syscalls, bits in red is the process injection syscalls being caught.
1 last issue to fix, then I'll publish (hopefully later today)
#blueteam #redteam #computerscience #computing #kernel #hacking #malware #maldev #rust #rustlang #rustdriver #cyber #cybersecurity #infosec #informationsecurity #ciso #cyber #winapi #bsides #DEFCON #BlackHat #SANS #CTF #reverseengineering #memoryforensics
2
33
3,378
10 May 2025
Alt syscalls on W11 are not causing instability now I **think** I have isolated the issue. Still one last stability issue to close.
No PatchGuard interference. HyperGuard.. I need to check (bricked my SecureBoot vm) - this is enough of a win for me to start writing it up :)
#blueteam #redteam #malware #security #cybersec #infosec #cybersecurity #maldev #rootkit #kernel #programming #rust #rustlang #rustdriver #edr #antivirus #altsyscall #syscall #cyber #hacking #pentesting
8
996
28 Mar 2023
【GT入荷情報】
本日はUSEDエフェクターのご案内！
HAO Rust Driver 入荷です！
3モードに1ノブ仕様のシンプルなペダル！
guitar-top.com
お問合せ等は info@guitar-top.com まで！
#HAO #RustDriver #EFECTORS
2
4
377
25 May 2021
Hao RustDriverプレゼント企画、
当選者は@tKmGuitars1 さんに決まりました‼️
おめでとうございます〜\(//∇//)\✨
沢山のご応募ありがとうございました❣️
12
22 May 2021
フォロワー様が3000人を突破したのでプレゼント企画をやってみますー！
Hao RustDriver(ゲインつまみ増設Mod)をプレゼントします！
応募方法はこの@guitaristokuno をフォロー&このツイートをRTしてくれた方の中から抽選で1名様にプレゼントｫｵｵ！( ◠‿◠ )
締切は5月25日の21時です！
4
42
59
6 Apr 2021
RustDriverのゲインポット追加、実は配線ミスってたことに気がつきまして、直してゲインつまみがしっかり効く様になりました...笑
これでローゲインもハイゲインもイケちゃうぞぉぉぉ！
ねちっこいミドルがナイスな歪みです\(//∇//)\✨
1
33
12 Oct 2019
New mini travel pedalboard for our guitarist combat ready.
FuzzBoy> Flashback> Phaser> RustDriver> Mojo> Boost> Tuner. Powered with Truetone 1 Spot Pro CS6. EBS flat cables wiring. Assembled with the magic touch of our guru and sound engineer @GuitarMoog #gearporn
1
7
7 May 2018
HAO RustDriver
ゲイン固定で歪みの質感を変えるだけの極シンプルなオーバードライブ！
粗めの歪みは存在感出しまくりです！
M
1
5
21 Feb 2018
今日のエフェクター。
ToneもGainもついていなくて音作りに迷わなくていいので楽チンです！
メインの歪みによさそうです！！
#HAO #RUSTDRIVER #efector… instagram.com/p/BfdD_3bnONM/
1
1 Jul 2017
HaoのRustdriver一時期所有してたけどMXRのmicroampにしてから手放してしまって、ロシアンマフと合体したらどうなったのか…1度でも良いからやっておけば良かったとコーカイコーカイ
2
9 May 2017
