download
mirror
Changelog:
mirror
Changelog:
- add support of numerous versions of windows 10 insider preview - up to 16193
- add dumping of FilterConnectionPorts
- add support of RFG (and v2 too)
- add dumping of ntdll!ProtectedPolicies
- add dumping of kernel etw traces (-wmi option)
- add dumping of EPROCESS.WnfContext
- add dumping of WNF kernelmode callbacks (-wnf option)