All pull requests

Pull requests

• CAPE: Add shadow-page harvester and non-mutating sparse PE dump for on-demand paged PEs

  #253·doomedraven opened Nov 9, 2026Collaborator·

  ·
  1

• Fix post-merge regressions in NtSuspendThread, InstrumentationCallback, and DotNetApi overload filtering

  #251·doomedraven opened Nov 5, 2026Collaborator·

  ·

• hook_misc: spoof anti-debug and InstrumentationCallback in NtQueryInformationProcess

  #243·doomedraven opened Oct 25, 2026Collaborator·

  ·

• Give each thread its own BSON buffer and stop holding g_mutex across all of loq()

  #215·doomedraven opened Sep 16, 2026Collaborator·

  ·

• Stop doing expensive work to answer cheap questions on the hot path

  #213·doomedraven opened Sep 15, 2026Collaborator·

  ·
  1

• Free what is allocated, restore what is saved

  #210·doomedraven opened Sep 15, 2026Collaborator·

  ·
  1

• Report what the API actually produced (changes behaviour-log output)

  #209·doomedraven opened Sep 15, 2026Collaborator·

  ·
  1

• Fix memory-safety defects in the API hook handlers

  #207·doomedraven opened Sep 15, 2026Collaborator·

  ·
  1

• Add .NET Profiling API fallback and anti-profiling mitigations

  #192·doomedraven opened Sep 1, 2026Collaborator·

  ·
  3

• feat(yara-x): Add YARA-X compilation & Pulley integration guide with precompiled x32/x64 binaries

  #191·doomedraven opened Aug 31, 2026Collaborator·

  ·
  1

• Researching: Implement unified .NET JIT Rebuilder and High-Signal Introspection Engine

  #180·doomedraven opened Aug 19, 2026Collaborator·

  ·
  5

• WIP: Mask hook inspection reads from VirtualAlloc WriteWatch queries

  #179·doomedraven opened Aug 19, 2026Collaborator·

  ·
  4

• Spoof virtual PCI and SCSI hardware devices invisibly

  #176·doomedraven opened Aug 19, 2026Collaborator·

  ·
  2

• Defeat advanced WMI hardware sensor evasion checks (al-khaser Bypass)

  #172·doomedraven opened Aug 18, 2026Collaborator·

  ·
  1

• Implement dynamic self-propagating COM VTable hooking for WMI (Modern OS Support)

  #171·doomedraven opened Aug 18, 2026Collaborator·

  ·

• nanopb: pluggable logging strategy (BSON default, protobuf opt-in)

  #164·doomedraven opened Aug 17, 2026Collaborator·

  ·
  7

• Add loaderlock-settle config option and generic If: conditional action

  #147·enzok opened Jul 24, 2026Contributor·

  ·
  1

• nanopb integration

  #118·kevoreilly opened Dec 23, 2025Owner·

  ·
  17