Greeting.
As the pics below reveal the ETW still logging PowerShell command, although BetterSharpPick did output [+] Successfully unhooked ETW![+] Successfully patched AMSI!.
It seems that patch code didn't work as expect. The testing version: Win11 23H2 && Win10 22H2。
