1 Commits

Author SHA1 Message Date
S12cybersecurity 1e30a1f9fd Add detection rule for PspCreateProcessNotifyRoutine enumeration
This rule detects binaries that attempt to enumerate PspCreateProcessNotifyRoutine kernel callbacks using BYOVD read primitives.
2026-04-21 11:21:31 +02:00