wesmar/kvc
KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on modern Windows with HVCI/VBS.
GitHub repository with 342 stars and 61 forks.
Language: C++
Topics: bypass-dse-load-unsigned-driver-windows11, disable-windows-defender-tamper-protection, driver-signature-enforcement-bypass-hvci-windows, dump-lsass-memory-protected-process-light, kernel-driver-stealth-loading, protected-process-light-ppl-wintcb-bypass, secureboot-disable-unsigned-driver-load, unprotect-process-ppl-wintcb, windows-watermark-removal-tool, patchguard-safe-dse-bypass