diff --git a/README.md b/README.md index bf31e21..3476653 100644 --- a/README.md +++ b/README.md @@ -497,6 +497,8 @@ Again this is just a demo/POC on how you can inherit `obfuscate`. This also show ### Kernel Example + + This example uses MSREXEC and Theodosius to map unsigned code into the kernel. This example is inside of the "Examples" folder. I would also like to note that in this demo external unexported ntoskrnl symbols are resolved by using a MAP file. This map file looks like this: ```