James Forshaw 
@tiraniddo@infosec.exchange
Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc.
infosec.exchange
James Forshaw
@tiraniddo@infosec.exchange
Security researcher in Google Project Zero. Author of Attacking Network Protocols. Tweets are my own etc.
infosec.exchange
@tiraniddo@infosec.exchange
·
Feb 26, 2026
My final blog related to admin protection is up. https://projectzero.google/2026/02/gphfh-deep-dive.html I go into a bit of history of the interesting GetProcessHandleFromHwnd API, how it ended up allow you to bypass protected process restrictions and how it's now "fixed".
View on infosec.exchange
10
0
12