Reverse engineering undocumented Windows Kernel features to work with the EDR - 0xflux Red Team Manual | Systems programming

https://fluxsec.red/reverse-engineering-windows-11-kernel

https://x.com/home/status/1972835480212553938

https://x.com/home/status/1972912534899564563

https://x.com/home/status/1973158990789112003