> > Just who among us really knows what dark code lurks in the
> > heart of \winnt\ntoskrnl.exe ?
>
> I am firmly convinced that there is no single person at Microsoft who can
> answer that in the affirmative.
In WinNT (or more technically correct - in a Portable Executable
file format) - at least, if its reachable by others its going to
be in the exports or imports list in the object code module ...
and can be detected, though it may be undocumented.
-----------------------------------------------------------------
Internet: mshines @
purdue .
edu * Michael S. Hines, CDP, CFE
Voice: (765) 494-5845 * Sr. Information Systems Auditor
FAX: (765) 496-1814 * Purdue University
if AC 765 doesn't work, try 317 * 1065 Freehafer Hall
* West Lafayette, IN 47907-1065
All views are my own and do not reflect Purdue University policy.
References:
|
|