From 8f48ca6b492001acc52a8add31a35c15be57fc57 Mon Sep 17 00:00:00 2001 From: pathtofile Date: Wed, 30 Nov 2022 10:42:07 +1100 Subject: [PATCH] Updated README --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index eedc948..a4f6b5c 100644 --- a/README.md +++ b/README.md @@ -28,7 +28,8 @@ It features: * -list - list currently available providers; * -diag - run system diagnostic for troubleshooting; * -prv - optional, select vulnerability driver provider; -* -ps - modify process object of given ProcessID; +* -ps - modify process object of given ProcessID, downgrading any protections; +* -pse - launch program as ProtectedProcessLight-AntiMalware (PPL); * -dse - write user defined value to the system DSE state flags; * -map - map driver to the kernel and execute it entry point, this command have dependencies listed below; * -scv version - optional, select shellcode version, default 1; @@ -44,6 +45,7 @@ Example: + kdu -prv 6 -scv 3 -drvn edrv -drvr e3600bl -map c:\install\e3600bl.sys + kdu -dse 0 + kdu -dse 6 ++ kdu -pse "C:\Windows\System32\notepad.exe C:\TEMP\words.txt" Run on Windows 10 20H2*