You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| `VM::TRAP` | Check if after raising two traps at the same RIP, a hypervisor interferes with the instruction pointer delivery | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9203) |
581
581
| `VM::UD` | Check if no waveform-audio output devices are present in the system | πͺ | 25% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L8950) |
582
-
| `VM::BLOCKSTEP` | Check if a hypervisor does not properly restore the interruptibility state after a VM-exit in compatibility mode | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9441) |
583
-
| `VM::DBVM` | Check if Dark Byte's VM is present | πͺ | 150% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9488) |
584
-
| `VM::BOOT_LOGO` | Check boot logo for known VM images | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9607) |
582
+
| `VM::BLOCKSTEP` | Check if a hypervisor does not properly restore the interruptibility state after a VM-exit in compatibility mode | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9478) |
583
+
| `VM::DBVM` | Check if Dark Byte's VM is present | πͺ | 150% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9525) |
584
+
| `VM::BOOT_LOGO` | Check boot logo for known VM images | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9644) |
585
585
| `VM::MAC_SYS` | Check for VM-strings in system profiler commands for MacOS | π | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L7370) |
586
-
| `VM::OBJECTS` | Check for any signs of VMs in Windows kernel object entities | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9710) |
587
-
| `VM::NVRAM` | Check for known NVRAM signatures that are present on virtual firmware | πͺ | 100% | Admin | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9896) |
588
-
| `VM::SMBIOS_INTEGRITY` | Check if SMBIOS is malformed/corrupted in a way that is typical for VMs | πͺ | 50% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L10327) |
| `VM::CPU_HEURISTIC` | Check whether the CPU is genuine and its reported instruction capabilities are not masked | πͺ | 90% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L10594) |
591
-
| `VM::CLOCK` | Check the presence of system timers | πͺ | 90% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L11062) |
586
+
| `VM::OBJECTS` | Check for any signs of VMs in Windows kernel object entities | πͺ | 100% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9747) |
587
+
| `VM::NVRAM` | Check for known NVRAM signatures that are present on virtual firmware | πͺ | 100% | Admin | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L9933) |
588
+
| `VM::SMBIOS_INTEGRITY` | Check if SMBIOS is malformed/corrupted in a way that is typical for VMs | πͺ | 50% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L10364) |
| `VM::CPU_HEURISTIC` | Check whether the CPU is genuine and its reported instruction capabilities are not masked | πͺ | 90% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L10631) |
591
+
| `VM::CLOCK` | Check the presence of system timers | πͺ | 90% | | | | [link](https://github.com/kernelwernel/VMAware/tree/main/src/vmaware.hpp#L11099) |
0 commit comments