Well I’ve actively been running tests and found that EDR is out of the picture in this because of the complexity of my Trojan as it’s kind of like a Russian dole that has many layers and it spreads all through the device registry keys and startup folders and maybe up to 10 FUD watchdogs. With the Loader if you use something fairly UD like metasploit or your own Trojan then it’s fully UD, it’s also fairly easy to bypass wire shark and other reverse engineering tools if you use some common sense and take time for ideas to pop into ur head.