The Curious Engineer

All blogs / Windows internals

Winsider Seminars & Solutions Inc.

windows-internals.com

Windows Internals Training & Consulting

Windows internalsSecurityReverse engineering

’20’21’22’23’24’25’26
Posts
34 from 5 Jan 2020 to 27 Jul 2026
Posting
now and then (3 in the last year)
Kind
company blog
Feed
https://windows-internals.com/feed/

2026 3

  1. Random Windows Things Part 2: Unexpected Clipboard Data Behavior
  2. Random Windows Things Part 1: PreviousMode Mitigation
  3. Goodbye Secure Pool, Hello KDP Pool

2024 2

  1. Secure Kernel Research with LiveCloudKd
  2. Troubleshooting a System Crash

2023 2

  1. KASLR Leaks Restriction
  2. Investigating Filter Communication Ports

2022 8

  1. An End to KASLR Bypasses?
  2. Understanding a New Mitigation: Module Tampering Protection
  3. One I/O Ring to Rule Them All: A Full Read/Write Exploit Primitive on Windows 11
  4. One Year to I/O Ring: What Changed?
  5. HyperGuard Part 3 – More SKPG Extents
  6. An Exercise in Dynamic Analysis
  7. HyperGuard – Secure Kernel Patch Guard: Part 2 – SKPG Extents
  8. HyperGuard – Secure Kernel Patch Guard: Part 1 – SKPG Initialization

2021 6

  1. IoRing vs. io_uring: a comparison of Windows and Linux implementations
  2. I/O Rings – When One I/O Operation is Not Enough
  3. Thread and Process State Change
  4. Exploiting a “Simple” Vulnerability, Part 2 – What If We Made Exploitation Harder?
  5. Exploiting a “Simple” Vulnerability – Part 1.5 – The Info Leak
  6. CET Updates – Dynamic Address Ranges

2020 13

  1. Exploiting a “Simple” Vulnerability – In 35 Easy Steps or Less!
  2. DPWs are the new DPCs : Deferred Procedure Waits in Windows 10 21H1
  3. CET Updates – CET on Xanax
  4. Critical , Protected , DUT Processes in Windows 10
  5. Secure Pool Internals : Dynamic KDP Behind The Hood
  6. PrintDemon: Print Spooler Privilege Escalation, Persistence & Stealth (CVE-2020-1048 & more)
  7. Faxing Your Way to SYSTEM — Part Two
  8. Symbolic Hooks Part 4: The App Container Traverse-ty
  9. Symbolic Hooks Part 3: The Remainder Theorem
  10. Symbolic Hooks Part 2 : Getting the Target Name
  11. “Move aside, signature scanning!” Better kernel data discovery through lookaside lists
  12. DKOM – Now with Symbolic Links!
  13. R.I.P ROP: CET Internals in Windows 20H1