Block EDR dynamic libraries from loading. By using debugging API, exception handling and simple hooks, one can spawn a clean process (PoC blocks amsi.dll). A nice post by @dis0rder_0x00 Source: github.com/dis0rder0x00/obex #redteam #maldev #malwaredevelopment