Awesome
EDRenum-BOF
Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
Compile
x86_64-w64-mingw32-gcc -c EDRenum-BOF.c -o EDRenum-BOF.o
CS
- load .cna
Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
x86_64-w64-mingw32-gcc -c EDRenum-BOF.c -o EDRenum-BOF.o