Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Debugging Windows Isolated User Mode (IUM) Processes

blog.quarkslab.com | research | #windows | #reverse-engineering | #hyper-v | #debugging | #ium | #trustlet

Summary

How to debug Windows Isolated User Mode (IUM) processes, aka Trustlets: using Hyper-V's virtual TPM as the target, with background on Virtual Secure Mode and Virtual Trust Levels.
Published
Collected

original ↗

Related coverage

  1. x64dbg-MCP Server: MCP-powered agentic reverse engineering for x64dbg (github.com)
  2. Solving BinaryShield VM Crackme by ra1n (blog.washi.dev)
  3. Injecting Code using Imported Functions into Native PE Files (blog.washi.dev)
  4. Linux kernel instrumentation from Qemu and Gdb (blog.quarkslab.com)
  5. A virtual journey: From hardware virtualization to Hyper-V's Virtual Trust Levels (blog.quarkslab.com)
  6. LLDBagility: practical macOS kernel debugging (blog.quarkslab.com)

back