Create README.md

2022-05-11 15:53:10 +08:00
parent a1b66995e4
commit 1bdb4a2852
1 changed files with 8 additions and 0 deletions
--- a/README.md
+++ b/README.md
@@ -0,0 +1,8 @@
+# Etw-Syscall
+
+捕获syscall调用就如同用windows defender的接口一样
+
+具体流程
+https://key08.com/index.php/2021/10/19/1375.html
+
+代码不好看 因为是临时试验