BYOVD tool for manipulating Windows Protected Process Light (PPL) protection at the kernel level.
redteamfortress/PPLShade has added +20 stars since the first tracked point, with current momentum at 16.80.