ARKit

Name: ARKit
Works on: windows

Windows 2000 and above

Version: 1
Last Updated: 19 Mar 2017
Release: 30 Jan 2012
Category: Programming > Components Libraries

Rate this software:
373 downloads

View Screenshots(1)

Comments

Download

Liked it? Tell others:

ARKit Tags

C++ library rootkit detector rootkit scanner rootkit scanner scan detector

ARKit Details

Rating: 2.04347826 out of 5 based on 23 user ratings

Publisher Website: External Link
Downloads: 373
License: Free

ARKit is a free software by Swatkat Thinkdigit and works on Windows 10, Windows 8.1, Windows 8, Windows 7, Windows XP, Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows 2012.
You can download ARKit which is 46.48 KB in size and belongs to the software category Components Libraries.
ARKit was released on 2012-01-30 and last updated on our database on 2017-03-19 and is currently at version 1.

Thank you for downloading from SoftPaz! Your download should start any moment now. It would be great if you could rate and share:

Rate this software:
Share in your network:

ARKit Description

ARKit is an open-source rootkit detection library that has two components:
ARKitLib.lib - A Win32/C++ static library that exposes various methods to scan system and detect rootkits
ARKitDrv.sys - A device driver that actually implements methods to scan and detect rootkits
Process detection methods:
PID brute force (PsLookupProcessByProcessId)
TID brute force (PsLookupThreadByThreadId)
Handle table traversing (NtQuerySystemInformation)
DLL detection methods:
InMemoryOrderModuleList traversal in process PEB
VAD tree walking
Process termination methods:
NtTerminateProcess/ZwTerminateProcess
NtTerminateThread/ZwTerminateThread for all threads of a process
Driver detection methods:
PsLoadedModuleList traversing
\Driver\ directory traversing in Object Manager
\Device\ directory traversing in Object Manager
Using ARKit library is quite simple:
Include ARKitLib.h and ARKitDefines.h header files in your application source
Link to ARKitLib.lib and Psapi.lib
Instantiate an object of ARKitLib class and use various member functions to gather system data
While running your application, make sure that ARKitDrv.sys driver is in the same directory where application is present.

ARKit Screenshots

Similar Software