cpu0x00 / EternelSuspention

a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it effectively useless if ran morethan 5 minutes the system freezes to death

shout out to https://github.com/Yair-Men/ for sharing this trick with me, his tool "ExplorerMen" layed out the starting point for me

About

a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless


Languages

Language:C# 100.0%