Archives
- 2008.04.02: Command line gotchas in CreateProcess
- 2008.03.16: Identifying resource access before faults
- 2008.03.07: Shortcuts and CommandLineFromMsiDescriptor
- 2008.02.29: AcGenral.dll shim hooks in Vista
- 2008.02.16: Injection coverage on Vista with UAC
- 2008.02.14: Process creation under Vista UAC
- 2008.02.12: Detour unhooking order
- 2008.01.28: Kaspersky issues with DLL injection
- 2008.01.08: Getting an MSI package's path from within MsiExec
- 2008.01.06: Weird detour patching in McAfee Enterprise 8.0i
- 2007.11.16: MSI file verification
- 2007.11.10: Norton AntiBot detects injection
- 2007.10.26: Quick registry gotchas
- 2007.10.25: Mapping registry paths between user and kernel space
- 2007.10.12: Tips for debugging deadlocks
- 2007.10.05: Lock contention, the loader lock and hidden API locks
- 2007.09.28: User Level API Hooking Mistakes to Avoid
- 2007.09.28: Growable memory maps and FSCTL_SET_SPARSE
- 2007.09.24: Global CreateFileMapping under Vista UAC
- 2007.09.11: Synchronous Windows messages and deadlock
- 2007.09.07: ZoneAlarm AV moves LoadLibrary
- 2007.09.07: Call virtualization in Fusion
