SecureKernel

final class ntoseye.SecureKernel

The secure kernel (securekernel.exe) running in VTL1, with views bound to its system address space. Read-only: writes raise NtoseyeError.

property base: int

Base address of securekernel.exe.

property dtb: int

The secure kernel’s system page-table root.

eval(expr: str) → int

Evaluate a debugger expression in the secure kernel’s symbol scope. Registers are VTL0 state and are refused.

property memory: Memory

Virtual memory through the secure kernel’s system page tables.

property modules: Modules

Modules the secure kernel loaded (securekernel.exe, skci.dll, …).

property symbols: Symbols

Symbols of the secure kernel’s modules (securekernel!...). NT’s symbols do not resolve here.

property trustlets: list[Trustlet]

The secure kernel’s processes (trustlets), walked afresh and validated against the NT process list. Raises NtoseyeError when this build’s process layout is not recognized.

property types: Types

PDB types read through VTL1 memory. The public secure-kernel PDB carries no types; name NT’s explicitly (nt!_LIST_ENTRY).