SNIPER VMI without the requirement of a dedicated DARKVUF patch

[ohault]

What could be the alternatives to this approach ?

[dcdelia]

I followed up on the linked post on the DRAKVUF page. To recap for future readers, some of the changes we introduced in the patch may be unnecessary now that DRAKVUF has evolved (we built SNIPER atop 376c03d, quite old by now) and other plugins faced some of the challenges we did. One could rework our implementation to use these features, so the actual extent of the needed patch may be smaller. The DRAKVUF maintainers seemed anyway open to a PR to ease SNIPER integration.

[ohault]

Thank you @dcdelia, if one would like to contribute to bring back the advances of Sniper into, or in sync with, the current DRAKVUF version in development, could you summarise in comparison with the current Drakvuf plugins the specific Sniper features that should be targeted ?