Skip to content

Commit

Permalink
fix typos
Browse files Browse the repository at this point in the history
  • Loading branch information
dzbeck committed Jun 25, 2021
1 parent cd94506 commit 4b21e88
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion credential-access/hooking.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ Methods
|---|---|---|
|**Hook memory mapping APIs**|F0003.002|Prevents memory dumps by preventing mapping of memory into the kernel's virtual address space. [[1]](#1)|
|**Hook procedures**|F0003.003|Intercepts and executes designated code in response to events such as messages, keystrokes, and mouse inputs. [[3]](#3)|
|**Import Address Hooking (IAT) Hooking**|F0003.004|Uses modifications to a process's IAT where pointers to imported API functions are stored.|
|**Import Address Table (IAT) Hooking**|F0003.004|Uses modifications to a process's IAT where pointers to imported API functions are stored.|
|**Inline Hooking**|F0003.005|Overwrites the first bytes in an API function to redirect code flow.|
|**Patch MmGetPhysicalMemoryRanges**|F0003.001|Patching this function to always return NULL prevents drivers from getting information about the physical address space layout, preventing memory dumps. [[1]](#1)|

Expand Down
2 changes: 1 addition & 1 deletion xample-malware/stuxnet.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ Behaviors

References
----------
<a name="1">[1]</a> https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_stuxnet_dossier.pdf
<a name="1">[1]</a> https://docs.broadcom.com/doc/security-response-w32-stuxnet-dossier-11-en

<a name="2">[2]</a> https://www.bbc.com/timelines/zc6fbk7

Expand Down

0 comments on commit 4b21e88

Please sign in to comment.