Commands for direct communication between Userland and Kernel Space. IOCTLs allow application to communicate with kernel mode device driver.

Attacks

  • Hooking IOCTL functions to filter results or modify control flow