HookCheck

Lightweight hook detection library that compares in-memory code against on-disk PE images to identify inline hooks, IAT redirects, syscall stub tampering, hardware breakpoints, page guard abuse, and EAT modifications. Includes a test harness that installs every hook type and benchmarks detection with rdtsc.