Hello,

due to my development with EasyHook, I discovered that PatchGuard seems to be disabled if "bcdedit -set TESTSIGNING ON" and/or "bcdedit /debug ON" is set as boot option. Can anyone confirm this statement?

I checked it by hooking KeCancelTimer() which should actually be in the scope of PatchGuard, shouldn't it? Actually nothing happend...

regards
chris