frida_win_dotnet_hook_method
Hook a .NET method in a Windows process to log invocations, using CLR bridge or JIT export scanning.
Instructions
[Windows] Hook a .NET method and log invocations.
Tries CLR bridge, falls back to JIT-compiled export scanning.
target: process name or pid (string).
assembly: assembly name (e.g. 'mscorlib').
namespace: .NET namespace (e.g. 'System.IO').
class_name: class name (e.g. 'File').
method_name: method to hook (e.g. 'ReadAllText').
duration_seconds: how long to capture (default 10).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | ||
| assembly | Yes | ||
| namespace | Yes | ||
| class_name | Yes | ||
| method_name | Yes | ||
| duration_seconds | No |