a simple bof to implement https://www.riskinsight-wavestone.com/en/2023/10/a-universal-edr-bypass-built-in-windows-10/
usage:
stoplooking <pid>
stoplooking 0 to select current process
-
Notifications
You must be signed in to change notification settings - Fork 2
zimnyaa/stoplooking
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A simple BOF that disables some logging with NtSetInformationProcess
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published