{"type":"rich","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fwww.scarlet-tactics.red%2Fentry%2F2026%2F02%2F14%2F134250\" title=\"EDR-Freeze v1.0-fbd43cf \u89e3\u8aac - Scarlet Tactics\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","width":"100%","categories":["AntiEDR","by AI"],"image_url":null,"blog_url":"https://www.scarlet-tactics.red/","author_url":"https://blog.hatena.ne.jp/skybreaker/","title":"EDR-Freeze v1.0-fbd43cf \u89e3\u8aac","provider_name":"Hatena Blog","published":"2026-02-14 13:42:50","url":"https://www.scarlet-tactics.red/entry/2026/02/14/134250","blog_title":"Scarlet Tactics","author_name":"skybreaker","height":"190","description":"github.com 1. \u30c4\u30fc\u30eb\u6982\u8981\u3068\u653b\u6483\u30b3\u30f3\u30bb\u30d7\u30c8 1.1 \u653b\u6483\u306e\u672c\u8cea 1.2 \u30d5\u30a1\u30a4\u30eb\u69cb\u6210\u3068\u5f79\u5272 2. \u30a8\u30f3\u30c8\u30ea\u30dd\u30a4\u30f3\u30c8\uff1awmain() 2.1 SeDebugPrivilege\u306e\u6709\u52b9\u5316 2.2 \u30e1\u30a4\u30f3\u30b9\u30ec\u30c3\u30c9ID\u53d6\u5f97\u3068FreezeRun\u547c\u3073\u51fa\u3057 3. \u6a29\u9650\u6607\u683c\uff1aEnableDebugPrivilege() 3.1 \u30c8\u30fc\u30af\u30f3\u53d6\u5f97 3.2 LUID\u53d6\u5f97\u3068\u7279\u6a29\u6709\u52b9\u5316 3.3 \u6210\u529f\u78ba\u8a8d 4. \u30e1\u30a4\u30f3\u30b9\u30ec\u30c3\u30c9ID\u53d6\u5f97\uff1aGetMainThreadId() 4.1 NtQuerySystemInformation\u306e\u52d5\u7684\u89e3\u6c7a 4.2 \u52d5\u7684\u30d0\u30c3\u30d5\u30a1\u78ba\u4fdd\u3068\u518d\u8a66\u884c\u30eb\u30fc\u30d7 4.3 \u30d7\u30ed\u30bb\u30b9\u60c5\u5831\u306e\u30ea\u30f3\u30af\u30ea\u30b9\u30c8\u8d70\u2026","provider_url":"https://hatena.blog"}