CET-Compliant Callstack Spoofing via Thread Pool Enum Callback Trampolining
A CET-compliant callstack spoofing technique that uses Windows thread-pool enum callbacks as syscall trampolines, defeating EDR stack telemetry without breaking Intel shadow-stack invariants.