Explain what ETW provides to EDR products - Describe ETW patching techniques - Explain AMSI and common bypass methods - Discuss the limitations of these bypasses