> For the complete documentation index, see [llms.txt](https://www.heresecurity.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.heresecurity.wiki/quan-xian-wei-chi/windows/rootkit.md).

# rootkit

```
隐藏 TCP 网络连接,隐藏进程,令牌操作(提权)
https://github.com/alal4465/Win_Rootkit
```