Tell me more ×
Stack Overflow is a question and answer site for professional and enthusiast programmers. It's 100% free, no registration required.

Is there anyway to hook/detour either of OpenProcess() or ReadProcessMemory() function calls to my own custom functions?

Without:

  1. kernel driver on Zw/NtOpenProcess, requires rootkit exploit or driver signing for deployment
  2. injecting .dll's in every process, spammy waste of resources and alerts many antivirus

I am trying to prevent other processes from getting a HANDLE or reading the memory of a vector of PIDs.

share|improve this question

1 Answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.