Back to skills
SKILL.md
Kernel Callbacks
ASecurityWindows kernel callback tradecraft: enum/remove/spoof create-process/image/thread/object callbacks, minifilter notes.
- 2 stars
- 0 votes
- 0 copies
- 0 views
- Added October 17, 2026
Security analysis
100/100Pro scans all 2 files and shows the line behind each finding
npx -y skills add NetVar1337/agent-skill-canon --skill kernel-callbacks --agent claude-codeAre you the author of Kernel Callbacks?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/netvar1337-kernel-callbacks)---
name: kernel-callbacks
description: "Windows kernel callback tradecraft: enum/remove/spoof create-process/image/thread/object callbacks, minifilter notes."
version: 1.0.0
license: GPL-3.0-or-later
metadata:
package: unleash-skills
author: NetVar1337/unleash
category: stealth
---
# Kernel callbacks
## Common
- Ps* notify routines
- ObRegisterCallbacks
- Cm callbacks
- Minifilters
## Research path
Enumerate → attribute owner module → assess PatchGuard risk → decide remove vs filter vs HV hide
Files in this skill
- SKILL.md
- agents/openai.yaml
Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.