mirror of
https://github.com/joaoviictorti/shadow-rs.git
synced 2026-01-16 22:14:36 +01:00
29 lines
653 B
Markdown
29 lines
653 B
Markdown
# Windows Kernel Rootkit in Rust (shadow-rs) Documentation
|
|
|
|
This documentation provides an overview of the shadow-rs rootkit project and instructions on its usage, features, and development process.
|
|
|
|
|
|
### Process
|
|
|
|
#### Hide / Unhide Process
|
|
|
|
Description:
|
|
This command allows you to hide or reveal specific processes on the system.
|
|
|
|
```cmd
|
|
shadow.exe process [hide | unhide] --pid <pid>
|
|
```
|
|
|
|
* `hide`: Hide the specified process.
|
|
* `unhide`: Unhide the specified process.
|
|
* `<pid>`: The PID of the process you want to hide or reveal.
|
|
|
|
Example of use:
|
|
|
|
```cmd
|
|
shadow.exe process hide --pid 1234
|
|
```
|
|
|
|
This command will hide the process with PID 1234.
|
|
|
|
### |