Sparta is a virtualization-based endpoint security solution for Windows. It's an educational research project of mine, which tries to demonstrate the power of virtualization-based solutions.
Basically, Sparta traces all suspicious kernel mode code executions, kernel structure manipulations, kernel code modifications and sensitive process memory corruptions, in order to detect abnormal behavior which can indicate a malware infection. See the "How It Works?" section for a deeper explanation.
TBD
TBD
- Omer Katz - omerk2511