TaxShadow API Hooking AccessCheckByType
Detects malware modifying memory protections to hook AccessCheckByType to force access success.
YARA-L

Detects malware modifying memory protections to hook AccessCheckByType to force access success.

Already have an account?