├── .gitignore ├── CobaltWhispers.cna ├── LICENSE ├── README.md └── src ├── Drivers ├── DisableDSE │ ├── DisableDSE.c │ ├── DisableDSE.h │ ├── Drivers │ │ ├── Interceptor.sys │ │ └── iqvm64.sys │ ├── Nal.h │ ├── beacon.h │ ├── hde64.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── Intercept │ ├── Common.h │ ├── Intercept.c │ ├── Intercept.h │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h └── UnloadDriver │ ├── UnloadDriver.c │ ├── UnloadDriver.h │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── Injection ├── CreateRemoteThread │ ├── CreateRemoteThread.c │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── MapViewOfSection │ ├── MapViewOfSection.c │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── PhantomDLLHollowing │ ├── PhantomDLLHollowing.c │ ├── beacon.h │ ├── headers.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── QueueUserAPC │ ├── QueueUserAPC.c │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── SpawnProcess │ ├── SpawnProcess.c │ ├── beacon.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h └── TransactedHollowing │ ├── TransactedHollowing.c │ ├── beacon.h │ ├── helpers.h │ ├── syscalls-asm.h │ ├── syscalls.c │ └── syscalls.h ├── Makefile └── Persistence ├── PersistElevatedRegKey ├── PersistElevatedRegKey.c ├── beacon.h ├── syscalls-asm.h ├── syscalls.c └── syscalls.h ├── PersistElevatedUserInitRegKey ├── PersistElevatedUserInitRegKey.c ├── beacon.h ├── syscalls-asm.h ├── syscalls.c └── syscalls.h ├── PersistScheduledTaskCOMHijack ├── PersistScheduledTaskCOMHijack.c ├── beacon.h ├── syscalls-asm.h ├── syscalls.c └── syscalls.h ├── PersistUserInitMprRegKey ├── PersistUserInitMprRegKey.c ├── beacon.h ├── syscalls-asm.h ├── syscalls.c └── syscalls.h └── PersistUserRegKey ├── PersistUserRegKey.c ├── beacon.h ├── syscalls-asm.h ├── syscalls.c └── syscalls.h /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/.gitignore -------------------------------------------------------------------------------- /CobaltWhispers.cna: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/CobaltWhispers.cna -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/README.md -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/DisableDSE.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/DisableDSE.c -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/DisableDSE.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/DisableDSE.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/Drivers/Interceptor.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/Drivers/Interceptor.sys -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/Drivers/iqvm64.sys: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/Drivers/iqvm64.sys -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/Nal.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/Nal.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/beacon.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/hde64.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/hde64.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/helpers.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/syscalls-asm.h -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/syscalls.c -------------------------------------------------------------------------------- /src/Drivers/DisableDSE/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/DisableDSE/syscalls.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/Common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/Common.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/Intercept.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/Intercept.c -------------------------------------------------------------------------------- /src/Drivers/Intercept/Intercept.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/Intercept.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/beacon.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/helpers.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/syscalls-asm.h -------------------------------------------------------------------------------- /src/Drivers/Intercept/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/syscalls.c -------------------------------------------------------------------------------- /src/Drivers/Intercept/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/Intercept/syscalls.h -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/UnloadDriver.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/UnloadDriver.c -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/UnloadDriver.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/UnloadDriver.h -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/beacon.h -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/helpers.h -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/syscalls-asm.h -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/syscalls.c -------------------------------------------------------------------------------- /src/Drivers/UnloadDriver/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Drivers/UnloadDriver/syscalls.h -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/CreateRemoteThread.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/CreateRemoteThread.c -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/beacon.h -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/helpers.h -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/syscalls.c -------------------------------------------------------------------------------- /src/Injection/CreateRemoteThread/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/CreateRemoteThread/syscalls.h -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/MapViewOfSection.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/MapViewOfSection.c -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/beacon.h -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/helpers.h -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/syscalls.c -------------------------------------------------------------------------------- /src/Injection/MapViewOfSection/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/MapViewOfSection/syscalls.h -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/PhantomDLLHollowing.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/PhantomDLLHollowing.c -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/beacon.h -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/headers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/headers.h -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/helpers.h -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/syscalls.c -------------------------------------------------------------------------------- /src/Injection/PhantomDLLHollowing/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/PhantomDLLHollowing/syscalls.h -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/QueueUserAPC.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/QueueUserAPC.c -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/beacon.h -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/helpers.h -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/syscalls.c -------------------------------------------------------------------------------- /src/Injection/QueueUserAPC/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/QueueUserAPC/syscalls.h -------------------------------------------------------------------------------- /src/Injection/SpawnProcess/SpawnProcess.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/SpawnProcess/SpawnProcess.c -------------------------------------------------------------------------------- /src/Injection/SpawnProcess/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/SpawnProcess/beacon.h -------------------------------------------------------------------------------- /src/Injection/SpawnProcess/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/SpawnProcess/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/SpawnProcess/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/SpawnProcess/syscalls.c -------------------------------------------------------------------------------- /src/Injection/SpawnProcess/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/SpawnProcess/syscalls.h -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/TransactedHollowing.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/TransactedHollowing.c -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/beacon.h -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/helpers.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/helpers.h -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/syscalls-asm.h -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/syscalls.c -------------------------------------------------------------------------------- /src/Injection/TransactedHollowing/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Injection/TransactedHollowing/syscalls.h -------------------------------------------------------------------------------- /src/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Makefile -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedRegKey/PersistElevatedRegKey.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedRegKey/PersistElevatedRegKey.c -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedRegKey/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedRegKey/beacon.h -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedRegKey/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedRegKey/syscalls-asm.h -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedRegKey/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedRegKey/syscalls.c -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedRegKey/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedRegKey/syscalls.h -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedUserInitRegKey/PersistElevatedUserInitRegKey.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedUserInitRegKey/PersistElevatedUserInitRegKey.c -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedUserInitRegKey/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedUserInitRegKey/beacon.h -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedUserInitRegKey/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedUserInitRegKey/syscalls-asm.h -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedUserInitRegKey/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedUserInitRegKey/syscalls.c -------------------------------------------------------------------------------- /src/Persistence/PersistElevatedUserInitRegKey/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistElevatedUserInitRegKey/syscalls.h -------------------------------------------------------------------------------- /src/Persistence/PersistScheduledTaskCOMHijack/PersistScheduledTaskCOMHijack.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistScheduledTaskCOMHijack/PersistScheduledTaskCOMHijack.c -------------------------------------------------------------------------------- /src/Persistence/PersistScheduledTaskCOMHijack/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistScheduledTaskCOMHijack/beacon.h -------------------------------------------------------------------------------- /src/Persistence/PersistScheduledTaskCOMHijack/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistScheduledTaskCOMHijack/syscalls-asm.h -------------------------------------------------------------------------------- /src/Persistence/PersistScheduledTaskCOMHijack/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistScheduledTaskCOMHijack/syscalls.c -------------------------------------------------------------------------------- /src/Persistence/PersistScheduledTaskCOMHijack/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistScheduledTaskCOMHijack/syscalls.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserInitMprRegKey/PersistUserInitMprRegKey.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserInitMprRegKey/PersistUserInitMprRegKey.c -------------------------------------------------------------------------------- /src/Persistence/PersistUserInitMprRegKey/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserInitMprRegKey/beacon.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserInitMprRegKey/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserInitMprRegKey/syscalls-asm.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserInitMprRegKey/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserInitMprRegKey/syscalls.c -------------------------------------------------------------------------------- /src/Persistence/PersistUserInitMprRegKey/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserInitMprRegKey/syscalls.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserRegKey/PersistUserRegKey.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserRegKey/PersistUserRegKey.c -------------------------------------------------------------------------------- /src/Persistence/PersistUserRegKey/beacon.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserRegKey/beacon.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserRegKey/syscalls-asm.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserRegKey/syscalls-asm.h -------------------------------------------------------------------------------- /src/Persistence/PersistUserRegKey/syscalls.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserRegKey/syscalls.c -------------------------------------------------------------------------------- /src/Persistence/PersistUserRegKey/syscalls.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/NVISOsecurity/CobaltWhispers/HEAD/src/Persistence/PersistUserRegKey/syscalls.h --------------------------------------------------------------------------------