Source code and compiled files: https://www.patreon.com/NullTerminator Discord: https://discord.gg/tpFmfE49Hx Credits VMCall for his write-up giving me this idea: https://secret.club/2019/10/18/kernel_gdi_hook.html Write-up on PsLoadedModuleList: https://eforensicsmag.com/windows-process-internals-a-few-concepts-to-know-before-jumping-on-memory-forensics-part-3-journey-in-to-the-psloadedmodulelist-loaded-kernel-modules-by-kirtar-oza/ Write-up on how to get kernel module addresses: https://m0uk4.gitbook.io/notebooks/mouka/windowsinternal/find-kernel-module-address-todo KdMapper: https://github.com/TheCruZ/kdmapper Timestamps: 0:00 - Thank you for 10k subs :D 0:35 - Video starts 4:20 - Coding 9:10 - Credits to articles 9:54 - Coding 17:02 - Results 17:30 - Demonstration for ESP Part 3 of my new kernel cheat series. In this video I show how to draw boxes from your kernel driver. :) If you're wondering i'm using Windows 10 1909 in this video.