Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
← Înapoi la Urmăritori

Fluxsec.red Blog

fluxsec.red/rss.xml
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 53

  1. Reverse engineering what HyperGuard monitors in ntoskrnl

    (Fluxsec.red Blog)

  2. Crimes against NTDLL - Implementing Early Cascade Injection

    (Fluxsec.red Blog)

  3. Starting point for simple ransomware detection

    (Fluxsec.red Blog)

  4. Introducing System Call Integrity Layer

    (Fluxsec.red Blog)

  5. Creating a Rust VBS Enclave DLL running in VTL1

    (Fluxsec.red Blog)

  6. Detecting Vectored Exception Handling Squared in an EDR

    (Fluxsec.red Blog)

  7. Vectored Exception Handling Squared

    (Fluxsec.red Blog)

  8. Creating a framework in Wyrm C2 to easily configure custom exports of an implant

    (Fluxsec.red Blog)

  9. Creating a local self signed certificate for localhost testing of Wyrm C2

    (Fluxsec.red Blog)

  10. Disassembly notes

    (Fluxsec.red Blog)

  11. Using Ghidriff to look at heap buffer overflow example

    (Fluxsec.red Blog)

  12. Timestomping a PE compile timestamp - adversary tradecraft and detection

    (Fluxsec.red Blog)

  13. Improving consistency with EDR DLL Injection via APCs

    (Fluxsec.red Blog)

  14. Hells Hollow: A new SSDT Hooking technique

    (Fluxsec.red Blog)

  15. Inside DCHSpy: Analysing Iranian APT MuddyWater free VPN mobile spyware

    (Fluxsec.red Blog)

  16. Rust OPSEC for Malware Development

    (Fluxsec.red Blog)

  17. Alt Syscalls for Windows 11

    (Fluxsec.red Blog)

  18. Making improvements to the EDR DLL injection

    (Fluxsec.red Blog)

  19. Making improvements to the EDR DLL injection

    (Fluxsec.red Blog)

  20. Real-time Ransomware Detection Strategy

    (Fluxsec.red Blog)

  21. Full spectrum Event Tracing for Windows detection in the kernel against rootkits

    (Fluxsec.red Blog)

  22. Reverse engineering undocumented Windows Kernel features to work with the EDR

    (Fluxsec.red Blog)

  23. Monitoring NTDLL for in memory patching

    (Fluxsec.red Blog)

  24. Intro and plan for the Sanctum EDR

    (Fluxsec.red Blog)

  25. Improving the Ghost Hunting implementation for flexibility and speed

    (Fluxsec.red Blog)

  26. Reading Event Tracing for Windows Threat Intelligence

    (Fluxsec.red Blog)

  27. EDR Evasion APC Queue Injection in Rust

    (Fluxsec.red Blog)

  28. EDR Evasion ETW patching in Rust

    (Fluxsec.red Blog)

  29. DLL Injection EDR Evasion 1: Hiding an elephant in the closet

    (Fluxsec.red Blog)

  30. Hells Gate Rust - EDR Evasion with syscalls

    (Fluxsec.red Blog)

  31. Windows Driver IRQL and acquiring a Driver Mutex

    (Fluxsec.red Blog)

  32. Error logging

    (Fluxsec.red Blog)

  33. Building the Driver Object

    (Fluxsec.red Blog)

  34. Configuring a Rust Windows driver

    (Fluxsec.red Blog)

  35. Creating a Windows Driver in Rust

    (Fluxsec.red Blog)

  36. Str Crypter - Payload string encryption with Rust

    (Fluxsec.red Blog)

  37. Rust DLL Search Order Hijacking

    (Fluxsec.red Blog)

  38. Export Resolver

    (Fluxsec.red Blog)

  39. Clipboard Hex Dumper Tool

    (Fluxsec.red Blog)

  40. Remote process DLL injection in Rust

    (Fluxsec.red Blog)

  41. Building a DLL in Rust

    (Fluxsec.red Blog)

  42. Introduction to the Windows API in Rust with a DLL Loader

    (Fluxsec.red Blog)

  43. Rust Windows Strings WinAPI Programming MSDN Cheatsheet

    (Fluxsec.red Blog)

  44. Creating a Protected Process Light in Rust for Sanctum EDR

    (Fluxsec.red Blog)

  45. Mitigating broadcast spoofs with Ghost Hunting

    (Fluxsec.red Blog)

  46. Hooking VirtualAllocEx

    (Fluxsec.red Blog)

  47. Ghost hunting OpenProcess

    (Fluxsec.red Blog)

  48. Communicating from the hooked syscall

    (Fluxsec.red Blog)

  49. Implementing syscall hooks in Rust

    (Fluxsec.red Blog)

  50. Theory: EDR Syscall hooking and Ghost Hunting, my approach to detection

    (Fluxsec.red Blog)