Search notes:

Kernel Patch Protection

Windows Patch Protection (KPP) prevents Kernel structures (64-bit editions of) Windows from being modified, either unwanted or maliciously.

Such protected structure include

System Service Tables
The interrupt descriptor table
The global descriptor table
Kernel stacks (that are not allocated by the kernel?)
Code in the kernel itself, or in the HAL or NDIS kernel libraries.

When KPP detects unwanted code, it crashes the system with the code 0x109 (CRITICAL_STRUCTURE_CORRUPTION).

Fatal error: Uncaught PDOException: SQLSTATE[HY000]: General error: 8 attempt to write a readonly database in /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php:78 Stack trace: #0 /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php(78): PDOStatement->execute(Array) #1 /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php(30): insert_webrequest_('/notes/Windows/...', 1758200821, '216.73.216.150', 'Mozilla/5.0 App...', NULL) #2 /home/httpd/vhosts/renenyffenegger.ch/httpsdocs/notes/Windows/security/Kernel-Patch-Protection/index(47): insert_webrequest() #3 {main} thrown in /home/httpd/vhosts/renenyffenegger.ch/php/web-request-database.php on line 78

Kernel Patch Protection

See also