lolzz1234

Seems like bam does log the execution of console applications in windows 11, even when it is run through a commandline like cmd.exe

Doesnt work with other dlls

1

I tested this with other dlls, I added an ico resource and changed the extension to .ico. It didnt run anything when loaded by explorer...

Is it possible to use Dll-rewriting.dll to delete a dll without the use of an exe?

1

I was wondering if this may be possible purely using dll injection.

Restarting eventlog is detectable. Is there any way around this?