Anathema is a library which allows to instrument running .NET programs by injecting MSIL code in order to hook specific methods. The inner working of the library was described in the following Phrack article: http://www.phrack.org/papers/dotnet_instrumentation.html