blind

C ★ 11 updated 5d ago

A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines

No plain-English explanation yet — one is being written right now. Check back in a minute.