[c6754]

How do I hook without a process seeing it in the stack?

ex. replace getprocaddress in a process without the call being seen on the stack

Do I hook the stack or use KeAttachStackProcess()?

im kinda new to kernel

[AxtMueller]

Try to use VEH hook? You can do it in user mode.

[adamdevine]

please give me some URL or Articles to Understand it.

[R136a1]

There's this new thing called search engines, I heard Google is good.

VEH hooking:
https://medium.com/@fsx30/vectored-exce ... 88754549c6