That Shouldn't Have Worked - Payload Development 101
Where
Track 3
CactusCon 13
Duration
54 min
Shows how payloads get past AV and EDR defenses, and what defenders should monitor to catch them.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Common Ground·45 min
Blake Hudson · Caleb Sargent
Shows how built-in tools and misconfigurations let attackers disable Zscaler and Microsoft Defender protections.
attackdefensive-securitydetection+3
Talks·41 min
Wietze Beukema
Shows how small command-line changes slip past EDR rules, and how a fuzzed model of Windows binaries generates working obfuscations.
attackwindowsdetection+2
Talks·30 min
Julien Bedel
Shows how COM and DCOM are abused for execution, persistence, lateral movement and impersonation on Windows.
windowsattacknetwork+2