Rootkits and device drivers

Now that you understand Windows internals and how user mode and kernel mode interactions work, let's dig into rootkits. In this section, we will understand what these rootkits are and how they are designed. After we have grasped the basic concepts of rootkits, we will discuss device drivers. 

What is a rootkit?

Rootkits are essentially low-level tools that provide stealth capabilities to malicious modules. This way, their main purpose is generally to complicate the malware detection and remediation procedures on the target machine by hiding the presence of related artefacts. There are multiple ways it can be done, let's discuss them in greater detail.

...