# DSMM: Discarded Section Manual Map

Manual map your driver and create a system thread inside a legit Windows driver (post-boot).

This method doesn't trigger PatchGuard.

Tested on Windows 10 x64 build 17763.

![Screenshot](https://i.imgur.com/lzLNKaC.png)

## (Re)sources:

- [Blackbone](https://github.com/DarthTon/Blackbone)
- [owned_alignment](https://github.com/vmcall/owned_alignment)
- [https://rayanfam.com/topics/inside-windows-page-frame-number-part2/](https://rayanfam.com/topics/inside-windows-page-frame-number-part2/)