
ring3-kit
Hides Process From Task Manager Using NT API Hooking (NtQuerySystemInformation)
defensive-toolsids-ips-evasionmalware-analysis+3
86

Hides Process From Task Manager Using NT API Hooking (NtQuerySystemInformation)

POC code according to trendmicro's research

An A/V evasion armoring experiment for CVE-2012-4681