Скачать с ютуб Demo Proof of Concept IFEO based Process Interceptor в хорошем качестве

Demo Proof of Concept IFEO based Process Interceptor

Using the Debugger feature available via the Image File Execution Options registry key, I have written C++ code that can run before any specific executable runs such that any code can be run by it (and similarly when the process exits) such as a script, reg.exe, robocopy.exe, etc. For instance, this could allow specific file or registry settings to be made for that application or to implement application setting persistence at the application level where persistent user profiles are not in use.