Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Blocked by wdfilter? #8

Open
Mukad3 opened this issue Oct 8, 2021 · 1 comment
Open

Blocked by wdfilter? #8

Mukad3 opened this issue Oct 8, 2021 · 1 comment

Comments

@Mukad3
Copy link

Mukad3 commented Oct 8, 2021

Hi,

I think this technique is being blocked by windows defender, even when it's disabled, and I'm not sure how. CreateRemoteThreadEx fails with 0xc0000022. I've confirmed it was working on windows 10 enterprise, with no defender installed.

@Josee-xav
Copy link

I believe apps like sandboxie also does something to cause that fail. mabye they hook it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants