MalwareTech / EDR-Preloader Public

Notifications You must be signed in to change notification settings
Fork 61
Star 362

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

362 stars 61 forks Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
includes		includes
EDR-Preloader.vcxproj		EDR-Preloader.vcxproj
KiUserApcDispatcher.asm		KiUserApcDispatcher.asm
Main.cpp		Main.cpp
README.md		README.md

Repository files navigation

EDR-Preloader

An EDR bypass that prevent EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

For details, see: malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

About

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

Report repository

Releases

No releases published

Packages

No packages published

Languages