Skip to content
Playing with the Windows Notification Facility (WNF)
blog.quarkslab.com | research | #windows | #reverse-engineering | #kernel | #training | #notifications | #wnf
Summary
A write-up of Bruce Dang's Recon Montreal exercise on WNF, the undocumented Windows kernel notification component, explaining its StateName/StateData model and reversing techniques.
- Published
- Collected