News for hackers. Stuff that matters.

A comment on A modern tool for the Windows kernel exploration and observability.

Re:A modern tool for the Windows kernel exploration and obse... by geraldcombs on Saturday December 05, 2020 @02:13PM (#25317374)
Is the kcap file format documented anywhere?
[ Parent | on HN ]
Re:A modern tool for the Windows kernel exploration and obse... by archrabbit on Sunday December 06, 2020 @03:57AM (#25322164)
You can check the kcap layout diagram in the source code docs:

https://github.com/rabbitstack/fibratus/blob/ee26bbc73999895...

[ Parent | on HN ]