SharpHookCheek
Most EDR's hook Nt and Zw APIs to determine if a running program has malicious intent. This C# based script returns a list of currently hooked APIs.
https://gist.github.com/sbasu7241/4c2640fb6dd5bfdcfac07b83f1648ee0
#edr #hooks #csharp #maldev
Post #545
439
