Monitoring Process Creation via the Kernel (Part I)

Objective-See · 3 hours ago Malware

Why BlockBlock needs a kext (hint: process monitoring), and how the kext was created