toneillcodes-windows-process-injection/edr-notes/crowdstrike.md

CrowdStrike EDR Notes

NOTE: Everything here is likely out of date by the time it is here. This information may still be interesting or helpful for people who are interested in AV/EDR evasion.

DLL umppc.dll

DLL Injection? Yes DLL Injection on Debug? No Usermode Hooking? Yes Kernel Hooking? Yes