Assembly command doesn't patch ETW

[Cyb3r-Monk]

Assembly command currently patches only AMSI and not ETW. Maybe ETW patch can be implemented?

[boku7]

great find, ty!

[boku7]

Talked to Dylan. So the ETW patch was throwing alerts for defender, so he took it out. I guess the AMSI one doesnt throw an alert so he left it in

[boku7]

maybe in the future we will look at adding an evasion method for blocking etw