NTDLL-reconstruction

NTDLL-reconstruction A userland EDR bypass technique that allows you to flip between unhooked and hooked ntdll.dll at will. How I built this can be found here. Usage You can just drag and drop the .h and .c file into your project make sure you edit the header file definition for CRT functions tha...