Struct directSyscall

internal/evasion/direct_syscall.go:36–36

directSyscall direct syscall evasion refers to a technique where adversaries bypass traditional user-mode API monitoring and security hooks by invoking system calls directly, but does so in a way that evades detection or analysis. A direct syscall bypasses Windows API functions and calls the underl

// system call directly using the syscall instruction, skipping the NTDLL
// stub that normally performs the transition to kernel mode.
type directSyscall struct{}

func NewDirectSyscall() Evasion {
	return &directSyscall{}