hook-buster Introduction A compact tool for detecting AV/EDR hooks in default libraries such as ntdll.dll, kernel32.dll and kernelbase.dll. Example usage: