Anti-Delete

July 16, 2018 ยท View on GitHub

Protects deletion of files with a specified extension using a kernel-mode driver.

Apologies for garbage code. :')

Related article: https://0x00sec.org/t/kernel-mode-rootkits-file-deletion-protection/7616