hrbust86 / HookMsrBySVM

hook msr by amd svm

SimpleSvmHookMsr

Introduction

SimpleSvmHookMsr is base on SimpleSvm .

Thanks a lot for Mr. Satoshi Tanda's help.

https://github.com/tandasat

https://github.com/tandasat/SimpleSvm

This project would not be done without your help.

SimpleSvmHookMsr is a minimalistic for hook msr to monitor syscall in x64.

Any questions could send a email to "[e-mail]"

SimpleSvm is a minimalistic educational hypervisor for Windows on AMD processors. It aims to provide small and explanational code to use Secure Virtual Machine (SVM), the AMD version of Intel VT-x, with Nested Page Tables (NPT) from a windows driver.

SimpleSvm is inspired by SimpleVisor, an Intel x64/EM64T VT-x specific hypervisor for Windows, written by Alex Ionescu (@aionescu).

Supported Platforms

• Windows 10 x64 and Windows 7 x64
• AMD Processors with SVM and NPT support

Resources

• AMD64 Architecture Programmer’s Manual Volume 2 and 3

  • http://developer.amd.com/resources/developer-guides-manuals/

• SimpleVisor

  • http://ionescu007.github.io/SimpleVisor/