This project is a demonstration of a set of process monitoring and management techniques used mainly in various security applications.
It is a Windows process monitoring tool, which includes a driver to monitor process start. This driver collects and reports process details to user mode and can allow or block its start.
|-> .\ Common - Files common for the user and driver
|-> .\ ProcessDll - Main DLL with all APIs
|-> .\ ProcessMonitor - Process monitoring driver
|-> .\ ProcMonGUI - GUI written using the Microsoft Foundation Class (MFC) library
x64/x86 architectures are supported.
Please note that the provided code only illustrates the process blocking technique and cannot be used in a commercial solution as-is.
You can find step-by-step code explanation and technology details in the [related article] (https://www.apriorit.com/dev-blog/254-monitoring-windows-processes).
Licensed under the MIT license. © Apriorit.
This repository is a public technical example from Apriorit related to general software engineering and advanced software engineering.
Apriorit is a cybersecurity-focused software engineering company that helps technology companies build secure, reliable, and high-performance software — from kernel-level components to cloud-based platforms.
Learn more: https://www.apriorit.com/rd-services/custom-software-and-application-development-services
Website: https://www.apriorit.com