KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS.
-
Updated
Feb 26, 2026 - C++
KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS.
Add a description, image, and links to the kernel-driver-stealth-loading topic page so that developers can more easily learn about it.
To associate your repository with the kernel-driver-stealth-loading topic, visit your repo's landing page and select "manage topics."