I have made a NDIS driver till now but the thing is I want to create a Ring3 driver. I know it is not as powerful but still good to learn. Till now I managed to hook DNSQuery() and other Functions which is used by KNOWN web browsers I can successfully redirect IE , Mozilla Firefox , Opera but not Google Chrome I cannot bypass its SandBox. I do not understand how do commercial Ring3 Level Redirtors work. I am working on a Open Source Porject for a Ring3 AV.
What ways do commercial Ring3 products bypass it? Or what other functions do I need to hook.