etw-patching

Here are 3 public repositories matching this topic...

CatFishee / UAC-Bypass-Malware

A C++ security research framework demonstrating Windows UAC bypass techniques (AMSI/ETW patching, Registry hijacking) paired with a high-speed, real-time memory and registry sentinel designed to detect and mitigate privilege escalation attempts.

cpp malware-analysis uac-bypass endpoint-security windows-security registry-monitor amsi-bypass privilege-escalation-poc etw-patching

Updated Aug 12, 2026
C++

ZeroDayVPN / ScareCrow-EDR-Evasion-Framework

Star

Advanced payload creation framework for bypassing EDR solutions and Application Whitelisting using DLL side-loading, in-memory unhooking, and indirect syscalls.

opsec malware-development red-team payload-generator golang-security windows-internals amsi-bypass unhooking edr-bypass dll-sideloading evasion-techniques etw-patching

Updated Jul 12, 2026

ZeroDayVPN / EDR-Bypass-Demos-Collection

Star

A comprehensive collection of practical demonstrations showcasing fundamental evasion techniques against antivirus and EDR solutions. Features examples using C++, C#, Syscalls, and APC injection.

syscalls offensive-security red-team shellcode-loader av-evasion malware-evasion memory-encryption edr-bypass apc-injection etw-patching csharp-malware cpp-evasion

Updated Jul 12, 2026

Improve this page

Add a description, image, and links to the etw-patching topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the etw-patching topic, visit your repo's landing page and select "manage topics."

Learn more