Reverse Engineering 0x4 Fun: Circumventing Windows Defender ATP’s user-mode APC Injection sensor from Kernel-mode

http://rce4fun.blogspot.com/2019/04/circumventing-windows-defender-atps.html?m=1