3 ms·
I'm really curious how Sandboxie defends against simply bypassing all DLLs altogether (including ntdll.dll), and performing direct Windows kernel syscalls?
by vardump 7y ago
I'm really curious how Sandboxie defends against simply bypassing all DLLs altogether (including ntdll.dll), and performing direct Windows kernel syscalls?