Before You Begin

DarkArk is an advanced anti-Trojan and anti-Rootkit utility designed strictly for personal study and educational research. Any commercial use is strictly prohibited. You must comply with all applicable local laws and regulations; using this tool for any illicit purpose is forbidden.

The author assumes no liability for system crashes (BSOD), data loss, or any other damages that may occur while using DarkArk. Do not install or use this software unless you have fully read, understood, and accepted all terms of this agreement. Launching, using, or indicating acceptance in any explicit or implied manner constitutes your agreement to be bound by these terms.

Antivirus alerts are false positives caused by driver signing issues. If loading fails, please verify that the driver file exists.
Note: Some anti-cheat systems (such as ACE) will block driver loading.

Changelog

v1.2
Added automated AI MCP tool calling
Added support for HVCI

v1.1
Fixed 32-bit process module enumeration issues
Optimized file manager performance
Refined Inline Hook / IAT Hook detection logic
Improved ETW-TI UI interactions
Added file unlocking
Added startup item management
Added DSE Patch
Added global disabling for Notify callbacks
Added WFP Callout / WFP Filter / Hosts management
Added ETW Hook detection

v1.0
Major update: overhauled core features and refreshed the UI
Added Registry browser
Added suspend, resume, and terminate system threads
Added process operations: DLL injection, Shellcode injection, and DLL unloading
Added load interception for specified EXE, DLL, and SYS files
Added directory protection
Added vulnerable driver disabling
Added driver mapping
Added KDMapper-dumper
Optimized MiniFilter information display

v0.4
Added driver trace cleaning
Added enable / disable / remove callbacks
Added disassembly viewer
Fixed known bugs

v0.3
Added window finder
Added anti-screenshot and anti-anti-screenshot
Added handle extraction
Added ETW-TI monitoring

v0.2
Added English translation
Minor optimizations and polish

v0.1
Initial release