Microsoft is moving antivirus providers out of the Windows kernel. Hopefully anti-cheat will be next
Magiilaro @ DarkMetatron @feddit.org Posts 0Comments 327Joined 1 yr. ago
Magiilaro @ DarkMetatron @feddit.org
Posts
0
Comments
327
Joined
1 yr. ago
There already is a API for this with ebpf for Windows and it is the same API that can be used on Linux (because it originates from Linux).
https://microsoft.github.io/ebpf-for-windows/
EBPF still runs in Kernel space but in a much more limited and confined way.