2023-08-17 10:45:50 +02:00
|
|
|
#include "kmanager.h"
|
|
|
|
|
2023-08-22 19:32:25 +02:00
|
|
|
kernelmode::KManager::KManager( LPCWSTR DriverName, std::shared_ptr<global::ThreadPool> ThreadPool, std::shared_ptr<global::Client> ReportInterface)
|
2023-08-17 10:45:50 +02:00
|
|
|
{
|
2023-08-18 07:33:13 +02:00
|
|
|
this->driver_interface = std::make_unique<Driver>(DriverName, ReportInterface);
|
2023-08-17 10:45:50 +02:00
|
|
|
this->thread_pool = ThreadPool;
|
|
|
|
}
|
2023-08-19 04:52:57 +02:00
|
|
|
|
|
|
|
void kernelmode::KManager::RunNmiCallbacks()
|
|
|
|
{
|
2023-08-19 05:29:29 +02:00
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->RunNmiCallbacks(); } );
|
2023-08-19 04:52:57 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
void kernelmode::KManager::VerifySystemModules()
|
|
|
|
{
|
2023-08-19 05:29:29 +02:00
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->VerifySystemModules(); } );
|
2023-08-19 04:52:57 +02:00
|
|
|
}
|
2023-08-20 16:12:04 +02:00
|
|
|
|
|
|
|
void kernelmode::KManager::MonitorCallbackReports()
|
|
|
|
{
|
2023-08-30 15:23:04 +02:00
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->QueryReportQueue(); } );
|
2023-08-20 16:12:04 +02:00
|
|
|
}
|
2023-08-21 17:48:34 +02:00
|
|
|
|
|
|
|
void kernelmode::KManager::DetectSystemVirtualization()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->DetectSystemVirtualization(); } );
|
|
|
|
}
|
2023-08-23 14:14:20 +02:00
|
|
|
|
|
|
|
void kernelmode::KManager::EnumerateHandleTables()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->CheckHandleTableEntries(); } );
|
|
|
|
}
|
|
|
|
|
|
|
|
void kernelmode::KManager::RequestModuleExecutableRegionsForIntegrityCheck()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->RequestModuleExecutableRegions(); } );
|
2023-08-30 13:27:23 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
VOID kernelmode::KManager::ScanPoolsForUnlinkedProcesses()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->ScanForUnlinkedProcess(); } );
|
|
|
|
}
|
2023-09-01 13:46:31 +02:00
|
|
|
|
|
|
|
VOID kernelmode::KManager::PerformIntegrityCheck()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->PerformIntegrityCheck(); } );
|
|
|
|
}
|
2023-09-02 15:47:15 +02:00
|
|
|
|
|
|
|
VOID kernelmode::KManager::CheckForAttachedThreads()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->CheckForAttachedThreads(); } );
|
|
|
|
}
|
2023-09-05 11:16:32 +02:00
|
|
|
|
|
|
|
VOID kernelmode::KManager::ValidateProcessModules()
|
|
|
|
{
|
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->VerifyProcessLoadedModuleExecutableRegions(); } );
|
|
|
|
}
|
2023-09-07 19:49:36 +02:00
|
|
|
|
2023-09-08 20:41:11 +02:00
|
|
|
VOID kernelmode::KManager::SendClientHardwareInformation()
|
2023-09-07 19:49:36 +02:00
|
|
|
{
|
2023-09-08 20:41:11 +02:00
|
|
|
this->thread_pool->QueueJob( [ this ]() { this->driver_interface->SendClientHardwareInformation(); } );
|
2023-09-07 19:49:36 +02:00
|
|
|
}
|