ssdt hook remnant detector — free browser tool | fatcousin

home

drop sysmon evtx csv or system evtx csv · detect unsigned and vulnerable kernel driver loads · identify bring your own vulnerable driver artifacts · surface kernel-level anti-forensic driver installations · runs locally

input

drop anti-forensics export

csv · json · jsonl · multiple files · local only

Select file

drop sysmon evtx csv or system evtx csv · local only

limits

heuristic screener · vendor schema varies · not definitive proof

status

>ready