Mirrors/wavestone-cdt-edrsandblast
1
0
Fork 0
mirror of https://github.com/wavestone-cdt/EDRSandblast.git synced 2026-06-10 17:31:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adds randomization of service name

Browse Source
This commit is contained in:
Qazeer
2021-11-10 01:12:48 +01:00
parent 4bff81986b
commit 9957b7a38e
7 changed files with 93 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
EDRSandblast/EDRBypass/KernelCallbacks.c
+3 -2
View File
@@ -1689,15 +1689,16 @@ void OperateNotifyRoutines(DWORD64 NotifyRoutineAddress, struct FOUND_EDR_CALLBA
}
}
}
edrDrivers->index = edrDrivers->index + CurrentEDRDriversCount;
if (CurrentEDRDriversCount == 0) {
_tprintf(TEXT("[+] No EDR driver(s) found!\n"));
}
else if (remove) {
_tprintf(TEXT("[+] Removed a total of %i EDR driver(s)\n"), CurrentEDRDriversCount);
_tprintf(TEXT("[+] Removed a total of %i EDR / security products driver(s)\n"), CurrentEDRDriversCount);
}
else {
_tprintf(TEXT("[+] Found a total of %i EDR driver(s)\n"), CurrentEDRDriversCount);
_tprintf(TEXT("[+] Found a total of %i EDR / security products driver(s)\n"), CurrentEDRDriversCount);
}
CloseHandle(Device);