.NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).