PageBuster: Stealthily Dump All the Code Ever Executed

A kernel module infrastructure to stealthily dump executable pages of packed processes at runtime. Published on the rev.ng blog.

March 31, 2021