Profense SDK 1.00 - Profense SDK is a professional SDK for fast developing of security applications

Details

Size: 0.08 MB License: Commercial OS: WinXP,Windows2000,Windows2003,Windows Vista Starter,Windows Vista Home Basic,Windows Vista Home Premium,Windows Vista Business,Windows Vista Enterprise,Windows Vista Ultimate,Windows Vista Home Basic x64,Windows Vista Home Premium x64,Windows Vista Business x64,Windows Vista Enterprise x64,Windows Vista Ultimate x64,Source Developer:FXSEC LTD (» more programs) View: Antivirus Report Download Now Buy Now Add to Download Basket

[Zoom screenshot]

Please select your Rating: Choose Rating: Awesome! Very Good Good Average Poor Awesome! 0% [No Votes] Very Good 0% [No Votes] Good 0% [No Votes] Average 0% [No Votes] Poor 0% [No Votes] No Ratings have been Posted.

Publisher's Description:

     Simple APIs of Profense SDK include powerful functions: multi
layer packet filter (transport layer and channel layer), system services monitor (SDT monitor), IDT
monitor, GDT monitor, LDT monitor, registry and filesystem access monitor, NT object manager
monitor, filesystem filtering interface, executive objects monitor (processes and threads), executable
objects monitor (executable images and sections), state-of-art hidden executive objects monitor
(SMM based), abnormal activity monitor (SMM based), abnormal activity monitor (VMM based,
including VMX & SVM interfaces), executive objects manipulation interface (using for hidden objects
in-memory heuristic search), Patch Guard manipulation interface (using for internal purposes),
interface for search of non-exported symbols in kernel environment, real-time instruction tracer
interface (using for catching suspicious interception of system services), interface for heuristic
detection of exploits (any kind of exploits, Trojans and viruses), IRP_MAJOR procedures monitor
(using for proactive defense`s purpose), hardware interrupt monitor (IRQ monitor, using for lowlevel
control of system activity), journal and history logger interface (applicable to any kind of
monitor), transport layer network monitor (TDI based filter), low-level network monitor (NDIS
based), TcpIp protocol suite (using for avoiding any malicious interception of network traffic), driver
- application communication interface (with two simultaneous channel type - Command channel
and Data channel, which renders asynchronous interface to communicate with kernel modules),
virtual address manipulation interface (search and enumeration of VAD list on per-process basis),
finite state machine for behavior-based detection (proactive defense decision module), network
firewall interface with flexible rule system (ALLOW/DENY/CONTENT_BLOCK/CONTENT_MODIFY
methods on any active network interface).