DriverShield

什么是 DriverShield？

DriverShield analyzes Windows kernel drivers for BYOVD vulnerabilities, rootkit behavior, and malware patterns. Features include IOCTL dispatch extraction, AI behavioral classification, YARA signature matching, MITRE ATT&CK mapping, and auto-generated Sigma SIEM rules. No login required to scan. Free REST API available for SOC/SOAR integration.