Explorer++ is a lightweight and fast file manager for Windows

Unorthodox and stealthy way to inject a DLL into the explorer using icons

Process injection alternative

A POC to disable TamperProtection and other Defender / MDE components

Patching AmsiOpenSession by forcing an error branching

Remotely Enumerate sessions using undocumented Windows Station APIs

I have documented all of the AMSI patches that I learned till now