Scrambling system Memory for regular expression strings in Windows

Question

Any ideas on where to start?

Answer 1

If the process you want to scan is currently running, you can connect to it as a debugger and clear its address space.

If you want to clear the memory as a whole, you will need to install a driver or something similar to exit the user space.

Answer 2

SoftICE (wiki) -, , Windows. , , Windows, . , SoftICE ( ), : IceStealth IceExt. , , . : Sysersoft , , SoftICE ( ), , Rasta Ring 0 Debugger, 2006 .

Answer 3

, , root... Administrator - - (, mode) -, , (, ). ( ) , - .

, , ring0, , BSOD . , VirtualBox Windows .

You will need to start searching for the Windows Kernel Mode SDK driver, which will allow you to write drivers. Other than that, I would not know how to do this! :)

This is what I'm going to stick to my favorite questions.

Good luck and hope this helps, Best regards, Tom.