Index[SYMBOL]
[A]
[B]
[C]
[D]
[E]
[F]
[G]
[H]
[I]
[J]
[K]
[L]
[M]
[N]
[O]
[P]
[R]
[S]
[T]
[U]
[V]
[W]
[Z]
RaiseCPUIrqlAndWait function Raw network manipulation binding to interfaces bouncing packets forging sources on Windows XP sending packets sniffing Read-only table access ReadFile function 2nd Reading ports Reboots from keyboard controllers surviving recvfrom function Registering for surviving reboot protocols Registers control latching between Registry for injecting DLLs into processes key detection operating system version queries in RegOpenKeyEx function RegQueryValue function RegQueryValueEx function 2nd Relative Virtual Addresses (RVAs) Remote command and control 2nd Remote servers connecting to sending data to Remote shells Remote threads Reordering of instructions REQINFO structure Rerouting control flow ResponseToArp function Restarting rootkits Returns, far Ring Zero Rings 2nd RootkitDispatch function RootkitRevealer tool Rootkits and software exploits characteristics of detecting behavior detection guarding-the-doors approach looking for hooks scanning rooms for kernel history of legitimate uses of loading offensive technologies operation of purpose of restarting vs. exploits vs. viruses RtlCopyMemory function RtlGetVersion function Run key Runtime address fixups Runtime patching detour.
[See Detour patching] jump templates variations RVAs
[See Relative Virtual Addresses] |