One Day Sec

Does the global API hook method work on Windows 8 or later systems?

No, this method only works on Windows 7 and Windows Server 2008 R2. Starting with Windows 8, Microsoft disables AppInit_DLLs when Secure Boot is enabled, which is the default. Even if the DLL is loaded, the process hiding fails due to these restrictions. The Using global API hooks to hide processes on Windows 7 systems article references the MSDN documentation explaining this limitation.
Windows 8Secure BootWindows 10limitationAppInit_DLLs disabled

Browse all Q&A →