From d18a7cf5e0253bf0204ab0ea9fc1d0bd81e22a49 Mon Sep 17 00:00:00 2001 From: Will <68499986+loneicewolf@users.noreply.github.com> Date: Mon, 4 Mar 2024 20:29:33 +0100 Subject: [PATCH] [+] Update blog to the actual blog Added the *actual* link, the old link is dead (404) --- FestiRootkit/SysrootHook/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/FestiRootkit/SysrootHook/README.md b/FestiRootkit/SysrootHook/README.md index 1643c91..d8e2f4e 100644 --- a/FestiRootkit/SysrootHook/README.md +++ b/FestiRootkit/SysrootHook/README.md @@ -1,3 +1,3 @@ -Complimentary code for this blog post: https://inino.xyz/2018/09/26/festi-rootkit-systemroot-hook/ +Complimentary code for this blog post: https://ininoxyz.wordpress.com/2018/09/26/festi-rootkit-systemroot-hook/ What it boils down to, is inserting a legacy file system filter driver in order to hide it's imagefile (KEyplorer.sys) on disk, to hide itself. See detailed blog post for further info.