Zero2504

EDR-GhostLocker. AppLocker-Based EDR Neutralization

COMouflage. COM-based DLL Surrogate Injection

Early-Cryo-Bird-Injections. Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects

Fairy-Law. Fairy Law - Compromise or disable EDR security solutions

FrostLock-Injection. FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a target process, inject shellcode, and then seamlessly resume (thaw) it.

Detoured-DLL-Injection. DLL injection with Microsoft detours

Shadow-Rebirth. Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique

Memory-Mirage-Anti-Debugging-. Use of in-memory string scans to outsmart reverse engineers

Anti-Debugging. Anti-Debugging (Self-Debugging)

Xtended-Runtime-Detection. XRD (Xtended Runtime Detection) – Clipboard monitoring and blocking tool to detect suspicious behavior in real-time, powered by pattern matching and full audit logging.