windows 6
- EDR Series Part 3: Payloads, Memory, and Runtime Reality
- EDR Series Part 2: Testing the Runtime Assumption - Are Injection APIs The Trigger?
- EDR Series Part 1: Do Your API Imports Get You Caught? Testing the Static Assumption
- Stealing Azure Tokens
- AMSI Internals Part 1: The Full Scan Pipeline
- Encrypted Shellcode