Scans all pages of a process via a kernel driver to determine if text sections of any images have been unexpectedly modified.
Could be used as an endpoint detection
Scans all pages of a process via a kernel driver to determine if text sections of any images have been unexpectedly modified.
Could be used as an endpoint detection