CDA Pattern Classification (Space/Mode)

The following tableĀ provides correspondence between kernel / user mode and space and pattern names. ALL means thatĀ a pattern is observable in both modes / spaces.

Table: CDA Pattern Classification (Space/Mode)

- Dmitry Vostokov @ DumpAnalysis.org -

Leave a Reply

You must be logged in to post a comment.