映像劫持VS启动杀软,再谈内核及进程保护,在内核驱动中检测隐藏进程,直接调用NTFS文件驱动检测隐藏文件,植入执行文件穿越软件防火墙-VS start taking images of soft kill, talk about the kernel and process protection, to detect hidden drivers in the kernel process and directly call the NTFS file driver detects hidden