cailllev 79e0eb41fa procexp vs lsass alerts

2025-11-29 12:55:43 +01:00

..

Kernel-Callbacks

move files

2025-10-20 19:09:19 +02:00

LoadLibrary-Tests

move files

2025-10-20 19:09:19 +02:00

Mitigations

move files

2025-10-20 19:09:19 +02:00

MsMpEng-DLLs

add loaded DLLs

2025-11-12 10:01:09 +01:00

Test-Output

more

2025-11-17 16:54:52 +01:00

Antimalware-ETW-demo.png

move files

2025-10-20 19:09:19 +02:00

Debug-KDU-pm-overwrite.txt

move files

2025-10-20 19:09:19 +02:00

Defender-for-Individuals-Events.txt

NtQueryInformationProcess works with threading resolver

2025-11-15 00:33:58 +01:00

EDRHooker-demo.png

docs

2025-10-19 19:02:39 +02:00

EDRReflectiveHooker-demo.png

Reflective Hooker works!!!

2025-10-20 19:59:47 +02:00

EDRReflectiveHooker-dump-demo.png

update

2025-11-20 11:21:07 +01:00

EDRReflectiveHooker-MsMpEng-demo.png

Reflective Hooker works!!!

2025-10-20 19:59:47 +02:00

LSASS-Dump-ProxExp-alert.png

procexp vs lsass alerts

2025-11-29 12:55:43 +01:00

LSASS-Dump-ProxExp-before.png

procexp vs lsass alerts

2025-11-29 12:55:43 +01:00

MsMpEng-EPROCESS.txt

Create MsMpEng-EPROCESS.txt

2025-10-13 18:20:59 +02:00