hook-buster

May 11, 2022 ยท View on GitHub

MIT License Windows 10

Introduction

A compact tool for detecting AV/EDR hooks in default libraries such as ntdll.dll, kernel32.dll and kernelbase.dll.

Example usage:

Usage example