Ask HN: What do you use to monitor system calls on Windows and Mac?

Re:Ask HN: What do you use to monitor system calls on Window... by PaulHoule on Wednesday May 11, 2022 @09:48AM (#31339900)

Something funny about Windows is that there are no documented system calls. That is, if you want to use some OS service you either call a function in a DLL or you make a COM call to a COM service.

If you click on the "show" button in this page

https://j00ru.vexillium.org/syscalls/nt/64/

you can see that the syscall numbers change from release to release!

I'm pretty sure that this tool

https://docs.microsoft.com/en-us/windows-hardware/drivers/de...

works by trapping calls to the DLL, which are stable.

[ Parent | on HN ]

There are no comments on this comment yet.