admin/rad9800-TamperingSyscalls
1
0
Fork 0
mirror of https://github.com/rad9800/TamperingSyscalls synced 2026-06-08 16:55:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
rad9800
2022-08-14 17:21:31 +01:00
committed by GitHub
parent 92a0cdeb14
commit 4c89633553
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2
View File
@@ -69,5 +69,7 @@ We cannot set a breakpoint on NtSetThreadContext or it's variants as this is use
There is a brief period where the debug registers are set, but this is very small and I do not think we will be detected for holding an open Dr0.
I have published a small blog post, touching upon these techniques.
[TamperingSyscall's Overview Blog Post](https://fool.ish.wtf/2022/08/tamperingsyscalls.html)
[TamperingSyscall's Fake Intropspection Blog Post](https://fool.ish.wtf/2022/08/feeding-edrs-false-telemetry.html)