Post #1258 111 Apr 20, 2023, 19:37 UTC A story about tampering EDRshttps://redops.at/en/blog/a-story-about-tampering-edrs RedOps - English A story about tampering EDRs - RedOps Most EDRs generally use a combination of user space and kernel space components, or the kernel components often form the basis for implementing user space protection mechanisms. A good example of this is the interaction between callback routines and user…