How to Defeat EDRs in Usermode

This presentation examines how endpoint defenses have evolved and demonstrates techniques for bypassing a custom EDR in usermode. It uses C# and the D/Invoke framework, then introduces Inceptor for bypassing modern defenses with built-in obfuscation.