Windows kernel, which is unable to access memory addresses? How do you decide?-CodePudding

Home > Software engineering > Windows kernel, which is unable to access memory addresses? How do you decide?

Windows kernel, which is unable to access memory addresses? How do you decide?

Time：09-22

Scene:
In my Windows 10 1809 x64 Shadow under the SSDT hooks, I would now like to read the Shadow near the SSDT within the scope of 4 gb of memory (GUI has additional process) for the second jump, but the memory of some location, once read blue screen,
Question:
How can I determine what memory is to allow me to read/write?

Page link：https//www.codepudding.com/Softwareengineering/21032.html

Prev:USB device corresponding to drive, how do you know the USB mount the drive

Next:How to handle a reference to the request object references to a Shared members?

Tags：

Process/thread/DLL

Links：
CodePudding