Reverse engineering and Reconstruction of Microsoft Defender's WdFilter.sys for Windows minifilter callbacks, registry monitoring, process tracking, DLP, and hardening.
c pdb static-analysis reverse-engineering windows-kernel file-system antivirus codeview decompilation dlp windows-driver security-research windows-defender minifilter kernel-internals microsoft-defender tamper-protection wdfilter driver-reconstruction defender-internals
-
Updated
Oct 6, 2026 - C