Monitoring Process Creation via the Kernel (Part I)

Objective-See · 7 hours ago Malware

Why BlockBlock needs a kext (hint: process monitoring), and how the kext was created