Igor.Korkin deleted file 4.3.2. Rating Point Inspection (RPI) for DRIVER_OBJECT detection2.tex  over 9 years ago

Commit id: 96ababe484b0db0f85058e40039cf39178511d7e

deletions | additions      

         

\textbf{Details of step 4. Determine ‘global_scope_deep’ value.} Use ZwOpenDirectoryObject function to obtain the list of DRIVER_OBJECT structures. For each DRIVER_OBJECT structure with the help of Table 6 calculate the numbers of matching points. Among these values select the minimum – ‘global_scope_deep’.