/explore
|
You are here 
|
oldboy21.github.io | ||
| | | | |
modexp.wordpress.com
Introduction Quick post about Windows System calls that I forgot about working on after the release of Dumpert by Cn33liz last year, which is described in this post. Typically, EDR and AV set hooks on Win32 API or NT wrapper functions to detect and mitigate against malicious activity. Dumpert attempts to bypass any user-level hooks... |
|
| | | | | ||
| | | | |
redops.at
|
|
| | | | | ||
| | | | |
alice.climent-pommeret.red
[AI summary] This technical article explains four dynamic methods (Hell's Gate, Halo's Gate, FreshyCalls, and Syswhispers2) used by attackers to bypass EDR hooks and retrieve syscall IDs by directly invoking Windows kernel services. |
|
| | | | | ||
| | | | |
www.greaterwrong.com
Is intelligence hard to evolve? Well, we're intelligent, so it must be easy... except that only an intelligent species would be able to ask that question, so we run straight into the problem of anthropics. Any being that asked that question would have to be intelligent, so this can't tell us anything about its difficulty (a similar mistake would be to ask "is most of the universe hospitable to life?", and then looking around and noting that everything seems pretty hospitable at first glance...). |
|
| | | |||
