---
id: 1667
title: "Introducing Windows Notification Facility’s (WNF) Code Integrity"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/05/15/introducing-windows-notification-facilitys-wnf-code-integrity/"
published_at: "2023-05-15T11:00:45Z"
tags: ["windows", "reverse-engineering", "offensive-security", "defense", "kernel", "detection", "code-integrity", "wnf", "lsass"]
phying_url: "https://phying.com/item/1667"
lang: en
---

# Introducing Windows Notification Facility’s (WNF) Code Integrity

## Summary

WNF is an undocumented Windows notification mechanism spanning processes and kernel drivers; this post examines new code-integrity state names useful for security tools monitoring LSASS protections.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-05-15T11:00:45Z
- **Original:** https://blog.trailofbits.com/2023/05/15/introducing-windows-notification-facilitys-wnf-code-integrity/
- **Phying News:** https://phying.com/item/1667