Mr-Un1k0d3r / EDRs

1.99k stars 348 forks source link

Detection of hooks in Import Address Table #15

Closed xalicex closed 2 years ago

xalicex commented 2 years ago

Hello,

This code detects hooks in the Import Address Table and replace the hooks with the true address of the functions.

I thought it could be usefull in this repo :)

Mr-Un1k0d3r commented 2 years ago

Thanks for contribution ❤

xalicex commented 2 years ago

You're welcome !

Mr-Un1k0d3r commented 2 years ago

Would you mind adding information about it in the readme.

xalicex commented 2 years ago

No problem ! It's done !