GitHub - thefLink/Hunt-Weird-Syscalls: ETW based POC to identify direct and indirect syscalls

https://github.com/thefLink/Hunt-Weird-Syscalls

https://twitter.com/home/status/1648728034097152004

https://twitter.com/home/status/1648750616393424896

https://twitter.com/home/status/1648751425550184450

https://twitter.com/home/status/1648751490339684352

https://twitter.com/home/status/1648751945832620033

https://twitter.com/home/status/1648757604628193281

https://twitter.com/home/status/1648765330917842975

https://twitter.com/home/status/1648767948369059868