通过　HOOK　PsCreateSystemThread　监控线程，入口函数特征码对比来过hs防护软件的保护，asm源码非常不错-HOOK PsCreateSystemThread through the monitoring thread, imported function signature hs been compared to the protection of protective software, asm source code is very good

CSOL 可用的ASI注入 方便做什麼事情 HS偵查不到-CSOL available ASI injected convenient to do something HS detection of less than

外掛過hs源碼 使用change image path 來達到過hs的目的