How un4ckn0wl3z/dioprocess-private works
DioProcess is a Windows desktop system-monitoring and security-research framework. The primary workflow starts in the Dioxus desktop UI, where users select a monitoring or manipulation feature; UI components use Rust crates for process, network, service, and kernel-driver operations, then present results. Separate branches cover event capture and persistence, hypervisor/EPT operations, and UEFI/SMM support. The README documents broader feature coverage than the sampled source excerpts, so links for those capabilities are shown at subsystem level rather than as inferred internal call chains.
Main entry points: routes.rs Feature routes · driver.rs Driver interface · process_tab.rs Process UI · main.rs Desktop launcher
Components 25
Desktop UI
- Desktop launcher
crates/dioprocess/src/main.rs - Application shell
crates/ui/src/components/app.rs - Feature routes
crates/ui/src/routes.rs - Process UI
crates/ui/src/components/process_tab.rs - Network UI
crates/ui/src/components/network_tab.rs - Service UI
crates/ui/src/components/service_tab.rs - Memory scanner UI
crates/ui/src/components/memory_scanner_tab.rs - Kernel feature UI
crates/ui/src/components/callback_tab.rs - Packet capture UI
crates/ui/src/components/packet_capture_tab.rs - UEFI management UI
crates/ui/src/components/uefi_tab.rs - SMM controls UI
crates/ui/src/components/smm_tab.rs
Usermode features
- Process operations
crates/process/src/lib.rs - Network inventory
crates/network/src/lib.rs - Service control
crates/service/src/lib.rs - Process manipulation
crates/misc/src/lib.rs
Kernel research
- Driver interface
crates/callback/src/driver.rs - Windows kernel driver
kernelmode/DioProcess/DioProcessDriver/DioProcessDriver.cpp - Hypervisor and EPT
kernelmode/DioProcess/DioProcessDriver/Hypervisor/hv.cpp
Events and packets
- Packet capture
crates/callback/src/packet_capture.rs - Saved packets
crates/callback/src/packet_storage.rs - Kernel event history
crates/callback/src/storage.rs
Boot and SMM
- UEFI management
crates/uefi/src/lib.rs - SMM communication
crates/smm/src/lib.rs - UEFI SMM handler
efi/DioProcessSmm/SmmMain.c
Other components
- Operator
Connections 25
- Operator → Desktop launcher: launches
- Desktop launcher → Application shell: launches
- Application shell → Feature routes: renders
- Feature routes → Process UI: routes to
- Feature routes → Network UI: routes to
- Feature routes → Service UI: routes to
- Feature routes → Memory scanner UI: routes to
- Feature routes → Kernel feature UI: routes to
- Feature routes → Packet capture UI: routes to
- Feature routes → UEFI management UI: routes to
- Feature routes → SMM controls UI: routes to
- Process UI → Process operations: queries and manipulates
- Process UI → Process manipulation: invokes techniques
- Network UI → Network inventory: queries
- Service UI → Service control: controls
- Memory scanner UI → Driver interface: scans via
- Kernel feature UI → Driver interface: sends driver requests
- Driver interface → Windows kernel driver: issues IOCTLs
- Windows kernel driver → Hypervisor and EPT: dispatches hypervisor work
- Packet capture UI → Packet capture: controls capture
- Packet capture → Saved packets: saves and loads
- Driver interface → Kernel event history: persists event history
- UEFI management UI → UEFI management: manages installation
- SMM controls UI → SMM communication: requests SMM operations
- SMM communication → UEFI SMM handler: communicates by SMI