Theory: EDR Syscall hooking and Ghost Hunting, my approach to detection - 0xflux Red Team Manual | Systems programming

https://fluxsec.red/edr-syscall-hooking

https://twitter.com/home/status/1906497448861733067

https://twitter.com/home/status/1906563600296403371

https://twitter.com/home/status/1906586996069253581