Issues

• New CPUID detections

  enhancement
  ayoubfaouzi/al-khaser#313 · Filter by author gsuberland opened on Jul 29, 2026

• [BUG] ACPI firmware string check misclassifies firmware strings

  ayoubfaouzi/al-khaser#307 · Filter by author IgorKorkin opened on Feb 13, 2026

• <experimental/filesystem> usage will fail to compile with MSVC Build Tools 14.51

  ayoubfaouzi/al-khaser#296 · Filter by author StephanTLavavej opened on Dec 4, 2025

• [BUG] VirtualAlloc_WriteWatch_APICalls always appear

  ayoubfaouzi/al-khaser#283 · Filter by author Lioncky opened on Mar 27, 2025
  3

• get_gdt_base invokes undefined behaviour on x64

  bug
  ayoubfaouzi/al-khaser#281 · Filter by author FortuneDan opened on Feb 10, 2025

• [Question] Are there possibilities to spoof ALL CIM-WMI values to bypass detection ?

  question
  ayoubfaouzi/al-khaser#278 · Filter by author Greatz08 opened on Jan 5, 2025
  1

• ldt_trick invalid detection method same results on 2 VM and 2 bare-metal (win+linux)

  bug
  ayoubfaouzi/al-khaser#259 · Filter by author adeliktas opened on Mar 17, 2023
  1

• False positive in Local Descriptor Table and Hyper-V global objects

  bug
  ayoubfaouzi/al-khaser#251 · Filter by author thewolfram opened on Aug 14, 2022
  2

  

• Ability to run a specific subset of checks

  enhancement
  ayoubfaouzi/al-khaser#247 · Filter by author weewoo22 opened on Nov 11, 2021
  1

• Anti-Debug: LocalSize(0)

  enhancement
  ayoubfaouzi/al-khaser#233 · Filter by author recvfrom opened on May 30, 2021

• Hyper-V RAW network protocol detection

  enhancement
  ayoubfaouzi/al-khaser#232 · Filter by author gsuberland opened on Apr 8, 2021

• Using PoolTags to Fingerprint Hosts

  enhancement
  ayoubfaouzi/al-khaser#231 · Filter by author hfiref0x opened on Apr 7, 2021
  3

• Anti-VM: Hyper-V / Windows Sandbox MAC

  enhancement
  ayoubfaouzi/al-khaser#229 · Filter by author recvfrom opened on Mar 5, 2021
  2

• Anti-VM: in instruction (VMWare)

  enhancement
  ayoubfaouzi/al-khaser#228 · Filter by author recvfrom opened on Mar 5, 2021
  2

• New hostnames / usernames checked for by malware

  enhancement
  ayoubfaouzi/al-khaser#227 · Filter by author recvfrom opened on Feb 12, 2021
  4

• Anti-VM: smsw

  enhancement
  ayoubfaouzi/al-khaser#225 · Filter by author recvfrom opened on Feb 9, 2021
  1

• Anti-VM: Screen Resolution

  enhancement
  ayoubfaouzi/al-khaser#216 · Filter by author Sqeegie opened on Sep 7, 2020
  1

  

• LDT false positive

  bug
  ayoubfaouzi/al-khaser#214 · Filter by author Ynob2000 opened on Jul 29, 2020
  1

• Anti-VM: XSETBV check

  enhancement
  ayoubfaouzi/al-khaser#213 · Filter by author Ynob2000 opened on Jul 28, 2020
  2

• Anti-Debugging Check - Known Window Names

  enhancement
  ayoubfaouzi/al-khaser#193 · Filter by author recvfrom opened on Sep 13, 2019
  1

• [Question] - Anti-Antivirus Checks?

  question
  ayoubfaouzi/al-khaser#192 · Filter by author recvfrom opened on Sep 11, 2019
  6

• Anti-Sandbox Check - Known ProductIDs

  enhancement
  ayoubfaouzi/al-khaser#190 · Filter by author recvfrom opened on Sep 5, 2019
  2

  

• Check this twitter thread

  enhancementhelp wanted
  ayoubfaouzi/al-khaser#186 · Filter by author seifreed opened on Jun 21, 2019
  4

• New anti-VM WMI checks

  enhancement
  ayoubfaouzi/al-khaser#172 · Filter by author gsuberland opened on Apr 13, 2019
  1

  

• KUSER_SHARED_DATA time checks

  enhancement
  ayoubfaouzi/al-khaser#168 · Filter by author ghost opened on Apr 9, 2019
  4