Pavel Yosifovich

@zodiacon · Twitter · 2026-09-23 13:43 UTC

What is OBJECT_ATTRIBUTES and how it's used? The Windows API hides it, but every native create or open call needs it. Full write-up: https://trainsec.net/library/windows-internals/object-attributes-explained-how-the-native-api-opens-kernel-objects/