Hey everyone,

​I just started a new job as an Application Security Engineer working on an EDR module. The agent is a C++ based thick client, and I have absolutely zero experience with desktop app or thick client pentesting.

​My background is in web application hacking, so I'm not a total beginner to security, but I'm completely lost on where to even begin with this. ​Could anyone point me to some good guides, methodologies, or tools for C++ thick client pentesting? Any advice on what to look for, especially with an endpoint security agent, would be amazing.

​Thanks!