Search talks

Black Hat · 2025black-hatadvanced

Demigod: The Art of Emulating Kernel Rootkits

Black Hat · 2025black-hatadvanced

Drop the ROP: Fine-Grained Control-Flow Integrity for the Linux Kernel

Black Hat · 2025black-hatadvanced

Kernel Mode Threats and Practical Defenses

Black Hat · 2025black-hatadvanced

Numchecker: A System Approach for Kernel Rootkit Detection

Black Hat · 2025black-hatexpert

Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process

BOTCONF · 2025botconf-euadvanced

Syslogk Linux Kernel Rootkit - Executing Bots via “Magic Packets”

David Álvarez Pérez

Black Hat · 2025BHUSA25expert

Shade BIOS: Unleashing the Full Stealth of UEFI Malware

Kazuki Matsuo

HITCON · 2025hitcon

Ring0 Rootkit - Coexistence with Viruses in Windows Kernel｜HITCON PEACE 2022

HITCON · 2025hitcon-2025

ksymless - A kernel rootkit works without kallsyms

IEEE SP · 2025ieee-symposium-on-security-and-privacy

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis

IEEE SP · 2025ieee-symposium-on-security-and-privacy

SyzDescribe: Principled, Automated, Static Generation of Syscall Descriptions for Kernel Drivers

MICROSOFT · 2025microsoft-security-response-center-msrc

BlueHat v18 || Return of the kernel rootkit malware (on windows 10)

NULLCON · 2025nullcon

Goa 2023 | Reverse Engineering RGB Keyboard Backlights With Linux Kernel Drivers by Rishit

LINUX FOUNDATION · 2025the-linux-foundation

BoF: Bash the Kernel Maintainers

Laurent Pinchart · Ideas on Board

LINUX FOUNDATION · 2025the-linux-foundation

CVEHound: Audit Kernel Sources for Missing CVE Fixes

Denis Efremov

LINUX FOUNDATION · 2025the-linux-foundation

Tutorial: Device Tree (DTS), Linux Board Bring-up and Kernel Version Changing

VIRUS BULLETIN · 2025videos

Unveiling the kernel: rootkit discovery using selective automated kernel memory differencing

VIRUS BULLETIN · 2025videos

Webcam interception and protection in kernel mode in Windows

HACKTIVITY · 2024hacktivity-it-security-festival

#Hacktivity2021 // GhostEmperor: From ProxyLogon to Kernel Mode, Story of a Modern Day Rootkit

HACKTIVITY · 2024hacktivity-it-security-festival

How to find rootkits in the linux kernel

COMMUNITY · 2024linux-security-summit-north-america

SandBox Mode (SBM) - New Execution Mode Between Kernel and User Space

Petr Tesarik

VIRUS BULLETIN · 2024virus-bulletin

SO that looks suspicious: leveraging process memory and kernel/usermode probes to detect Shared...

DEF CON · 2023DC31

#NoFilter: Abusing Windows Filtering Platform for Privilege Escalation

Ron Ben Yizhak

RSAC · 2023rsa-conference-rsac

eBPF Warfare - Detecting Kernel & eBPF Rootkits with Tracee