GhostVEH
https://github.com/EvilBytecode/GhostVEH | Registers Vectored Exception Handlers by directly manipulating ntdll's internal LdrpVectorHandlerList structure instead of calling RtlAddVectoredExceptionHandler.
Discuss on Reddit: https://ift.tt/rg8kC65
@blueteamalerts
Post #18679
572