Skip to main content
Cybersecurity
Fig. 4 | Cybersecurity

Fig. 4

From: Hypervisor-assisted dynamic malware analysis

Fig. 4

Physical memory layout after full initialization of the monitoring component. The original OS handler (OSSyscallHandler) jumps to our handler (OurHandler) during its prologue. Our handler handles the system call and jumps back to the origin OS handler (HandleContinue)

Back to article page