Kernel Driver on HalfTimeOfLifehttps://halftimeoflife.github.io/en/tags/kernel-driver/Recent content in Kernel Driver on HalfTimeOfLifeHugo -- gohugo.ioenec.charbonnier@gmail.com (Elouan Charbonnier)ec.charbonnier@gmail.com (Elouan Charbonnier)© 2026 Elouan CharbonnierMon, 28 Sep 2026 00:00:00 +000009 - Monitoring Registry Activityhttps://halftimeoflife.github.io/en/posts/09-registry-sensor/Mon, 28 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/09-registry-sensor/Implementing KDAMonitor’s fourth sensor: monitoring the creation, modification, and deletion of registry values.08 - Monitoring Network Connections with the Windows Filtering Platformhttps://halftimeoflife.github.io/en/posts/08-network-sensor/Thu, 24 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/08-network-sensor/Third KDAMonitor sensor: capturing inbound and outbound IPv4 connections.07 - Preparing Network Monitoring: Setting Up the WFP Sessionhttps://halftimeoflife.github.io/en/posts/07-wfp-session/Mon, 21 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/07-wfp-session/Setting up KDAMonitor’s WFP session (provider, sublayer).06 - The Second Sensor: Tracking Image and DLL Loadshttps://halftimeoflife.github.io/en/posts/06-image-sensor/Thu, 17 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/06-image-sensor/Implementing KDAMonitor’s second sensor: monitoring image loads.05 - First Sensor: Monitoring Process Creation and Terminationhttps://halftimeoflife.github.io/en/posts/05-process-sensor/Mon, 07 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/05-process-sensor/Implementing KDAMonitor’s first sensor: monitoring process creation and termination.04 - Writing Events to Disk: JSONL Logging, Wake Events and the First Crashhttps://halftimeoflife.github.io/en/posts/04-log-writer/Tue, 01 Sep 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/04-log-writer/Writing logs to disk and the first kernel crash of the KDAMonitor driver.03 - The Event Queue: Structure and Synchronization in the Kernelhttps://halftimeoflife.github.io/en/posts/03-event-queue/Fri, 21 Aug 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/03-event-queue/Building the event queue for the KDAMonitor driver.02 - Building the Driver Foundation: DriverEntry, Device Object and IOCTL Communicationhttps://halftimeoflife.github.io/en/posts/02-driver-foundation/Tue, 11 Aug 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/02-driver-foundation/Building the KDAMonitor driver foundation: device object and the first IOCTL communication with a test client.01 - Introduction to KDAMonitor: Building a Windows Kernel Driverhttps://halftimeoflife.github.io/en/posts/01-introduction-kdamonitor/Fri, 07 Aug 2026 00:00:00 +0000ec.charbonnier@gmail.com (Elouan Charbonnier)https://halftimeoflife.github.io/en/posts/01-introduction-kdamonitor/Introduction to the KDAMonitor project and its goals.