Post #844 62 Apr 8, 2020, 17:26 UTC Universally Evading Sysmon and ETWhttp://blog.dylan.codes/evading-sysmon-and-windows-event-logging/