通过修补 NT API 存根并在运行时解析 SSN 和系统调用指令来绕过 EDR 挂钩

2023-02-23 14:35:12 浏览数 (1)

https://github.com/D1rkMtr/UnhookingPatch/tree/main/UnhookingPatch

api

0 人点赞