hwbp

Here are 5 public repositories matching this topic...

Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW

etw amsi cobaltstrike sleepmask hwbp

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

c in-memory etw veh security-research amsi amsi-bypass amsi-evasion edr-evasion etw-evasion hwbp etw-bypass hwbp-evasion wldp-bypass wldp hardware-breakpoints patchless-hooking

Correlating kernel notifications with the lack of ETW events to detect ETW Patching

detection red inline etw team hooking red-team patching blue-team red-teaming detection-engineering amsi-bypass red-team-tools blue-team-tool hwbp hardware-breakpoint hwbp-evasion event-tracing inline-patching

malware evasion hwbp indirect-syscall

Research notes on the SQ tracking sample chain, GameCore delivery, and ACE/WeGame boundary analysis

To associate your repository with the hwbp topic, visit your repo's landing page and select "manage topics."