EDR bypass

Direct syscalls:

GitHub - ymmfty0/PESyscallGitHub

Syscall numbers

Some methods:

https://pre.empt.blog/2023/maelstrom-5-edr-kernel-callbacks-hooks-and-call-stacks