Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR. - View it on GitHub