Pinned Loading

1. EDR-GhostLockerEDR-GhostLockerPublic

   AppLocker-Based EDR Neutralization

   C 342 45

2. Fairy-LawFairy-LawPublic

   Fairy Law - Compromise or disable EDR security solutions

   C++ 80 11

3. COMouflageCOMouflagePublic

   COM-based DLL Surrogate Injection

   C++ 198 22

4. Early-Cryo-Bird-InjectionsEarly-Cryo-Bird-InjectionsPublic

   Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects

   C++ 147 18

5. FrostLock-InjectionFrostLock-InjectionPublic

   FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a target process, inject shellcode, and then seamlessly resume (tha…

   C++ 47 7

6. Detoured-DLL-InjectionDetoured-DLL-InjectionPublic

   DLL injection with Microsoft detours

   C++ 25 11