Released alongside with the presentation at REcon 2023, TheRestarter is a tool is designed to interact with the Windows Restart Manager.
- Register a file, a process or a service within a Restart Manager session to retrieve the list of affected applications (applications currently using the resource)
- Attempt to terminate the affected applications detected by the Restart Manager
- Automatically search & display for the list of services and processes that are currently used by applications other than themselves
- Iterate over the binaries of the system to determine if a target process is currently running
- Simulating the lock of a file (for a future file registration example)
- Windows 10/ Windows 11
- Visual Studio 2022
- Dowload the sources files:
git clone https://github.com/MathildeVenault/TheRestarter.git
- Open .sln file in Visual Studio 2022
- Compile with
x64
/Release
mode - (Optional, to simulate file locking) Copy
LockFile.exe
in the directory where your executable will be executed
Published under the licence : MIT
Initial commit : version 0.1 (June, 2023.)