Curious about whats happening in the Windows Kernel after a Syscall? I just wrote this post following the worfkflow from the Syscall instruction to the target kernel routine https://alice.climent-pommeret.red/posts/a-syscall-journey-in-the-windows-kernel/ Thanks again to @Set_hyx for the proofreading! AliceCliment @malwr 347 viewsedited 19:03