Hooking the native API and controlling process creation on a system-wide basis
IntroductionRecentlyIcameacrossthedescriptionofaquiteinterestingsecurityproduct,calledSanctuary.Thisproductpreventsexecutionofanyprogramthatdoesnotappearonthelistofsoftwarethatisallowedtorunonaparticu