LayeredSyscall - Abusing VEH to Bypass EDRs | White Knight Labs

https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusing-veh-to-bypass-edrs/

https://x.com/home/status/1818813929864257779

https://x.com/home/status/1818879422046363748

https://x.com/home/status/1818987921531400573