Ghidra, Reverse Engineering, Kernel Mode.
comparisons 🤐 Function Reversing Now that we know which functions will execute internally when the driver receives an IOCTL, we can begin reversing those functions to find interesting functionalities. Because this differs so much between drivers, there’s no real sense in covering this process