Hooking all threads (unmanaged)

Sep 29, 2010 at 8:20 AM

Hi there,

I was wondering if there's a way to hook all running threads without any access list, or at least to update the access lists when a new thread is created?

Thanks!

Sep 29, 2010 at 12:03 PM

You can leave the list empty and set it to "exclusive" mode (that is, the list describes what threads to exclude from hooking). Which means, every thread is hooked.