// TAG

#Windows Kernel

Posts in this collection, ordered newest first.

202606.11

SystemsJun 11, 202615 min read

Explains the eBPF for Windows execution architecture, verifier, program and attach types, and networking and security use cases.

202605.10

1-Day AnalysisMay 10, 20262 min read

Summarizes a Windows AFD.sys heap buffer overflow that allows a local attacker to escalate privileges to SYSTEM.