Talks·54 min
Logan Klein
Shows how Windows EDR products are evaded through AMSI and ETW bypasses, DLL unhooking and process hollowing.
windowsattackdetection+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Talks·54 min
Logan Klein
Shows how Windows EDR products are evaded through AMSI and ETW bypasses, DLL unhooking and process hollowing.