# SysWhispers4

## Docs

- [EDR Detection Vectors](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/edr-detection.md): Understanding how different syscall methods fare against EDR detection techniques
- [ETW-Ti and Kernel-Level Detection](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/etw-ti-limitations.md): Understanding the limits of user-mode evasion and kernel-level telemetry
- [FreshyCalls](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/freshycalls.md): Sort-by-VA syscall number resolution that bypasses inline hooks
- [Hardware Breakpoint SSN Extraction](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/hw-breakpoint.md): Use CPU debug registers and VEH to capture syscall numbers at runtime
- [Project Structure](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/project-structure.md): Understanding SysWhispers4's codebase architecture and module organization
- [Recommended Configurations](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/recommended-configs.md): Battle-tested configurations for different engagement scenarios
- [RecycledGate](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/recycled-gate.md): Hybrid SSN resolution combining FreshyCalls sorting with opcode validation
- [Sleep Encryption (Ekko)](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/sleep-encryption.md): XOR-encrypt process memory during sleep to evade periodic scanners
- [Call Stack Spoofing](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/stack-spoofing.md): Forge synthetic return addresses to evade stack-walking EDR detection
- [Updating Syscall Tables](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/syscall-table-updates.md): How to update syscall numbers from j00ru's repository for new Windows builds
- [SyscallsFromDisk](https://mintlify.wiki/JoasASantos/SysWhispers4/advanced/syscalls-from-disk.md): Map clean ntdll from disk to extract SSNs, bypassing all inline hooks
- [Evasion Helper Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/evasion-helpers.md): Optional helper functions for AV/EDR bypass, unhooking, and anti-debugging
- [File Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/file-functions.md): NT syscall functions for file I/O operations
- [Initialization Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/initialization.md): Setup and initialization API for SysWhispers4 syscall resolution
- [Memory Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/memory-functions.md): NT syscall functions for virtual memory allocation, protection, reading, and writing
- [API Overview](https://mintlify.wiki/JoasASantos/SysWhispers4/api/overview.md): Overview of the SysWhispers4 generated API for direct NT syscall invocation
- [Process & Thread Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/process-thread-functions.md): NT syscall functions for process and thread creation, manipulation, and synchronization
- [Supported Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/supported-functions.md): Complete list of all 64 NT syscall functions supported by SysWhispers4
- [Token Functions](https://mintlify.wiki/JoasASantos/SysWhispers4/api/token-functions.md): NT syscall functions for token manipulation, privilege escalation, and impersonation
- [Command Reference](https://mintlify.wiki/JoasASantos/SysWhispers4/cli/command-reference.md): Complete CLI reference for SysWhispers4 with all flags and options
- [Evasion Options](https://mintlify.wiki/JoasASantos/SysWhispers4/cli/evasion-options.md): Comprehensive guide to all evasion flags and their effects
- [Invocation Methods](https://mintlify.wiki/JoasASantos/SysWhispers4/cli/invocation-methods.md): Detailed documentation of syscall invocation techniques
- [SSN Resolution Methods](https://mintlify.wiki/JoasASantos/SysWhispers4/cli/ssn-resolution-methods.md): Detailed documentation of System Service Number (SSN) resolution techniques
- [Architecture Support](https://mintlify.wiki/JoasASantos/SysWhispers4/concepts/architecture-support.md): Platform and compiler compatibility for x64, x86, WoW64, ARM64, and various toolchains
- [Evasion Techniques](https://mintlify.wiki/JoasASantos/SysWhispers4/concepts/evasion-techniques.md): Overview of obfuscation, anti-analysis, and runtime evasion features
- [Invocation Methods](https://mintlify.wiki/JoasASantos/SysWhispers4/concepts/invocation-methods.md): Different techniques for executing syscalls while evading EDR detection
- [SSN Resolution Methods](https://mintlify.wiki/JoasASantos/SysWhispers4/concepts/ssn-resolution.md): Overview of System Service Number resolution techniques for bypassing EDR hooks
- [Advanced Evasion](https://mintlify.wiki/JoasASantos/SysWhispers4/guides/advanced-evasion.md): Advanced evasion configurations: SSN resolution methods, invocation techniques, and obfuscation
- [Basic Usage](https://mintlify.wiki/JoasASantos/SysWhispers4/guides/basic-usage.md): Basic usage patterns and common workflows for SysWhispers4
- [Integration with MinGW/Clang](https://mintlify.wiki/JoasASantos/SysWhispers4/guides/integration-mingw.md): Complete guide to integrating SysWhispers4 with MinGW and Clang compilers
- [Integration with MSVC](https://mintlify.wiki/JoasASantos/SysWhispers4/guides/integration-msvc.md): Complete guide to integrating SysWhispers4 with MSVC and Visual Studio projects
- [Presets Reference](https://mintlify.wiki/JoasASantos/SysWhispers4/guides/presets.md): Complete documentation of all SysWhispers4 function presets and their use cases
- [Installation](https://mintlify.wiki/JoasASantos/SysWhispers4/installation.md): Install SysWhispers4 and configure your development environment for syscall stub generation
- [Introduction to SysWhispers4](https://mintlify.wiki/JoasASantos/SysWhispers4/introduction.md): Advanced syscall stub generator for AV/EDR evasion via direct and indirect system calls on Windows
- [Quick Start](https://mintlify.wiki/JoasASantos/SysWhispers4/quickstart.md): Generate your first syscall stubs and integrate them into a C project in minutes

## OpenAPI Specs

- [openapi](https://mintlify.wiki/JoasASantos/SysWhispers4/api-reference/openapi.json)