---
title: "Discussion on \"Extracting the SSDT directly from ntoskrnl.exe\" | Hashnode"
description: "Discussion on \"Extracting the SSDT directly from ntoskrnl.exe\". Guide and sample code for extracting SSDT/KiServiceTable from the Windows kernel binary without a debugger"
url: "https://hashnode.com/posts/extracting-the-ssdt-directly-from-ntoskrnlexe/61c485c20e66663d56fcbc4b"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Extracting the SSDT directly from ntoskrnl.exe](https://www.lodsb.com/extracting-the-ssdt-directly-from-ntoskrnlexe?utm_source=hashnode&utm_medium=feed)

Guide and sample code for extracting SSDT/KiServiceTable from the Windows kernel binary without a debugger

Dec 23, 2021 · 7 min read · lodsb.com  
Read the article

## Written by

[Sam Russell](https://hashnode.com/@samrussell)

@samrussell

  
[View profile](https://hashnode.com/@samrussell)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.