LayeredSyscall - Abusing VEH to Bypass EDRs | White Knight Labs

https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusing-veh-to-bypass-edrs/