Microsoft Detours

Microsoft Detours is an open source library for intercepting, monitoring and instrumenting binary functions on Microsoft Windows.[1] It is developed by Microsoft and is most commonly used to intercept Win32 API calls within Windows applications. Detours makes it possible to add debugging instrumentation and to attach arbitrary DLLs to any existing Win32 binary. Detours does not require other software frameworks as a dependency and works on ARM, x86, x64, and IA-64 systems. The interception code is applied dynamically at execution time.

Microsoft Detours
Original author(s)Microsoft Research
Developer(s)Microsoft
Initial releaseJanuary 16, 2002 (2002-01-16)
Stable release
4.0.1 / April 16, 2018 (2018-04-16)
Repositorygithub.com/microsoft/Detours
Written inC++
Operating systemMicrosoft Windows
TypeSoftware library
LicenseMIT License
Websitewww.microsoft.com/en-us/research/project/detours/

Detours is used by product teams at Microsoft and has also been used by ISVs.[2][3][4]

The source code is licensed under MIT License and available on GitHub.[5]

See also

References
  1. https://www.nuget.org/packages/Detours/
  2. Microsoft Research Detours Package
  3. MS Detours: Ongoing vigilance keeps customers on the right track. - Cisco Blog
  4. Sophos Endpoint Security and Control: How Sophos uses Microsoft Detours - Sophos Community
  5. https://github.com/microsoft/Detours

Further reading
  • Hunt, Galen; Brubacher, Doug (1997). "Detours: Binary Interception of Win32 Functions" (PDF). Third USENIX Windows NT Symposium.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.