Vector35 / Vector35/binaryninja-api
Better Windows Kernel Driver Support
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 1.3k
- Forks
- 298
- Avg merge
- 5d 5h
- Merged PRs (30d)
- 19
Description
What is the feature you'd like to have?
Would like better type support for Windows drivers similar to what is done here: https://github.com/thalium/ida_kmdf
Is your feature request related to a problem?
Looking to speed up my malware analysis process.
Are any alternative solutions acceptable?
IDA with https://github.com/thalium/ida_kmdf but rather use BN ;-)
Additional Information:
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the linked thalium/ida_kmdf project and comparing its Windows driver type support with Binary Ninja's public API. Define which driver types or analysis behaviors are in scope and how equivalent support would be verified. Done means the agreed Windows kernel-driver cases are supported in Binary Ninja with validation against the reference behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- operating-systems, reverse-engineering
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100