TLDR InfoSec · LAUNCHES & TOOLS
CLR-UNHOOK
Summary from the TLDR InfoSec newsletter
CLR-Unhook is a native C++ utility that bypasses EDR/AV hooks in the .NET Common Language Runtime by restoring the original nLoadImage function implementation.
TLDR InfoSec · LAUNCHES & TOOLS
CLR-Unhook is a native C++ utility that bypasses EDR/AV hooks in the .NET Common Language Runtime by restoring the original nLoadImage function implementation.