bypass-edr

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

翻译 - 规避技术以挫败和转移安全产品的检测和预防 (AV/EDR/XDR)

Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

翻译 - 通过文件映射加载 ntdll.dll 的新副本以绕过 API 内联挂钩。