Transparent COM instrumentation for malware analysis

DispatchLogger is an open-source Windows DLL that instruments late-bound COM (IDispatch) interactions via transparent proxying and recursive object wrapping to provide semantic logging of script-based automation (VBScript, JScript, PowerShell). The report describes the interception strategy (CoCreateInstance/CoGetClassObject/CoGetObject hooks), implementation details, sample logs, deployment guidance, limitations (IDispatchEx, out-of-process COM, 64-bit testing), and use cases for analyzing WMI-based attacks, fileless/LOTL techniques, persistence mechanisms, and data exfiltration.