boot-security

A professional security research study on Windows system locking and access restriction mechanisms. Analysis of boot configuration, registry-based shell hijacking, WinAPI process protection, and OS interface persistence under adversarial stress.

TPM-backed predictive re-enrollment for LUKS disk encryption. Predicts and prevents lockouts caused by security updates that change TPM PCR measurements, and adds a device identity certificate check as a fourth gate before automatic re-enrollment. Includes an interactive demo explaining the full system.