A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager
-
Updated
Mar 26, 2019 - C
#
dkom
Here are 6 public repositories matching this topic...
Kernel-mode process protection driver with user GUI
kernel-driver kernel-mode dkom wdk windows-driver process-protection driver-development obregistercallbacks
-
Updated
Jan 7, 2026 - C++
PsLoadedModuleList Unlinking through DKOM Manipulation
-
Updated
Sep 27, 2025
A DKOM hiding stuff for Linux, FreeBSD and NetBSD.
-
Updated
Nov 14, 2021 - C
Improve this page
Add a description, image, and links to the dkom topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the dkom topic, visit your repo's landing page and select "manage topics."