From 23a32005b34d68f8aa5dd7f83773484da2aa700f Mon Sep 17 00:00:00 2001 From: _xeroxz Date: Mon, 2 Nov 2020 00:53:35 +0000 Subject: [PATCH] Update README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f03d57e..193f993 100644 --- a/README.md +++ b/README.md @@ -8,8 +8,8 @@ A library to manipulate drivers exposing a physical memory read/write primitive to allow the user to call any function in the kernel. There are thousands of drivers exposing physical memory read/write, a bunch are listed in this repo. Currently the project is using gdrv.sys, and is inline hooking NtShutdownSystem. The inline hook is not patchguard friendly, -but is removed after every syscall into NtShutdownSystem to prevent possible detection. Although this is not patchguard friendly, using this to call a few kernel functions will most likely not cause any issues. -This will not work on HVCI systems. +but is removed after every syscall into NtShutdownSystem to prevent triggering patchguard. Although this is not patchguard friendly, using this to call a few kernel functions will most likely not cause any issues. +This library is not ment to be used by itself, it is ment to help the programmer setup whatever they need to in the kernel. # Example