Edr

KMDLLInjector

How does EDRs inject their hooking DLL into a user mode process? KMDLLInjector was the answer for this quetion