All pull requests

Pull requests

• Stop allocating 64 KB per path on the hooked call paths

  #216·doomedraven opened Sep 16, 2026Contributor·

  ·
  2

• Give each thread its own BSON buffer and stop holding g_mutex across all of loq()

  #215·doomedraven opened Sep 16, 2026Contributor·

  ·

• Make the shared state in the hook path actually shared-safe

  #214·doomedraven opened Sep 15, 2026Contributor·

  ·

• Stop doing expensive work to answer cheap questions on the hot path

  #213·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• CI: update the MSBuild workflow to runner images that still exist

  #212·doomedraven opened Sep 15, 2026Contributor·

  ·

• Define NDEBUG in Release and build it optimized

  #211·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• Free what is allocated, restore what is saved

  #210·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• Report what the API actually produced (changes behaviour-log output)

  #209·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• Bound the fixed-size buffers in the core

  #208·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• Fix memory-safety defects in the API hook handlers

  #207·doomedraven opened Sep 15, 2026Contributor·

  ·
  1

• Fix logic defects that silently disable checks or corrupt output

  #206·doomedraven opened Sep 15, 2026Contributor·

  ·
  4

• Track and expose Module Overloading evasion techniques

  #199·doomedraven opened Sep 8, 2026Contributor·

  ·
  2

• fix(pipe): bind loaded notices to process identity

  #197·wmetcalf opened Sep 7, 2026Contributor·

  ·
  2

• Add .NET Profiling API fallback and anti-profiling mitigations

  #192·doomedraven opened Sep 1, 2026Contributor·

  ·
  1

• feat(yara-x): Add YARA-X compilation & Pulley integration guide with precompiled x32/x64 binaries

  #191·doomedraven opened Aug 31, 2026Contributor·

  ·
  1

• fix(dotnet): Resolve JIT vtable slot issues and add comprehensive V2-V5 ABI translation support (1.1 to 10.0)

  #188·doomedraven opened Aug 30, 2026Contributor·

  ·
  4

• fix: Address local memory boundaries and buffer constraints

  #184·doomedraven opened Aug 26, 2026Contributor·

  ·
  3

• Implement dynamic Go (Golang) stripped symbol recovery and tracing

  #181·doomedraven opened Aug 22, 2026Contributor·

  ·
  4

• Researching: Implement unified .NET JIT Rebuilder and High-Signal Introspection Engine

  #180·doomedraven opened Aug 19, 2026Contributor·

  ·
  5

• WIP: Mask hook inspection reads from VirtualAlloc WriteWatch queries

  #179·doomedraven opened Aug 19, 2026Contributor·

  ·
  4

• Spoof virtual PCI and SCSI hardware devices invisibly

  #176·doomedraven opened Aug 19, 2026Contributor·

  ·
  2

• Implement .NET Core (CoreCLR) JIT and active AMSI buffer monitoring (PR-1)

  #173·doomedraven opened Aug 18, 2026Contributor·

  ·
  2

• Defeat advanced WMI hardware sensor evasion checks (al-khaser Bypass)

  #172·doomedraven opened Aug 18, 2026Contributor·

  ·
  1

• Implement dynamic self-propagating COM VTable hooking for WMI (Modern OS Support)

  #171·doomedraven opened Aug 18, 2026Contributor·

  ·

• Extend WMI value spoofing engine for advanced VM evasion

  #170·doomedraven opened Aug 18, 2026Contributor·

  ·