kernel callback removal detector — free browser tool | fatcousin

drop kernel object dump · detect missing/removed registry/process callbacks · runs locally

input

drop callback dump · csv inventory · baseline (optional)

or click

Select file

PspCreateProcessNotifyRoutine · CmRegisterCallback · null slots · baseline differential

limits

heuristic screener · parses artifacts locally · not definitive proof of rootkit callback removal

status

>ready