domains / families / security / offensive-edr-evasion

offensive-edr-evasion

separate

An offensive checklist for EDR evasion techniques including hook unhooking, direct syscalls, and AMSI bypass. Used for planning EDR bypass during red team engagements or researching AV/EDR evasion.

When to use

• EDR evasion
• EDR bypass
• hook unhooking
• direct syscalls
• PPID spoofing
• process injection
• AMSI bypass
• ETW patch

Skill page

Source