In this article we will see how Windows drivers work, how to create one and, in the end, we will develope a custom EDR that will rely on kernel callback functions, static analysis and API hooking.

Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team