“The term hooking covers a range of techniques used to alter or augment the behavior of an operating system, of applications, or of other software components by intercepting function calls or messages or events passed between software components.” — WikipediaThis give us the ungodly ability to read/modify a function’s argument(s)/return’s value, detour execution flow, and “replace” a function’s logic. A crash course on how to achieve this power, how to detect it, and how to fix it - all the while breaking an EDR product.