🚀 go-pugleaf

As Remy has pointed out, there are some api's that are used specifically 
when injecting.

However, there are many many ways to inject and hook.  Madshi's system, as 
far as i know, uses a layer file system driver as well.  The concepts most 
commonly explained when taking about injection, are often outdated.  It 
really all depends on what you are trying to achieve.  Are you looking for a 
global protection and alert system to inform on rouge injection or do you 
have a specific requirement.  Most of the text that you will read, relates 
directly to user-land injection although the current trend is moving towards 
system injection systems.

A particularly good text is "Rootkits - Subverting the Windows kernal" by 
Greg Hoglund and James Bulter.  Madshi's site is also a very good basis for 
practical information.

HTH

Mike


"Mark Jacobs" <www.jacobsm.com/mjmsg.htm?Borland Newsgroup> wrote in message 
news:465b45cb$1@newsgroups.borland.com...
>I need some information on how an application can raise an alert if another 
>process on the system attempts to perform DLL code injection. I also need 
>to know how to detect when a process attempts to install a hook into the 
>Windows system. Any ideas anyone? It is for a security application. TIA,
> -- 
> Mark Jacobs
> http://jacobsm.com
>
>