Briefings·32 min
Kyle Avery
Engineers share architectures for fine-tuning open source language models to uncover zero-day vulnerabilities across binary targets.
aimalware-analysisevasion+2
edr-evasion
17 talks tagged with this topic.
Filters+
Loading filters…
1–17 of 17 talks · loading…
Wild West Hackin' Fest·49 min
Presenters detail vulnerability discovery and exploitation in Roll for Stealth Intro to AV EDR Evasion | Mike Saunders | WWHF Deadwood 2022.
evasionedredr-evasion
Hack In The Box Security Conference·1 hr 2 min
Jorge Gimenez · Karsten Nohl
Jorge Gimenez investigates #HITB2022SIN EDR Evasion Primer For Red Teamers.
evasionedredr-evasion
Main Stage·44 min
Andrew Case · Chad Sellers · Golden G. Richard III
Memory forensics techniques and Volatility 3 plugins designed to detect direct syscalls, module stomping, and EDR bypasses.
memory-forensicsvolatilityedr-evasion+2
Main Stage·39 min
Helvio Carvalho Junior
HookChain technique for dynamically altering API call sequences and hooking mechanics to bypass EDR telemetry in memory.
hookchainedr-evasionapi-hooking+2
x33fcon·52 min
Analysts investigate attack surfaces and defenses concerning 12. EDR Evasion and OODA Loops by Jackson T..
evasionedredr-evasion
Main Stage·37 min
Daniel Avinoam
Daniel Avinoam reverse engineers the Windows Containers minifilter driver, weaponizing native filesystem isolation to hide malicious files and evade EDR sensors.
windows-containersminifilteredr-evasion+2
Main Stage·27 min
Asaf Gilboa · Ron Ben-Yitzhak
Asaf Gilboa and Ron Ben-Yitzhak present a stealthy credential dumping technique that abuses native Windows Error Reporting (WER) to dump LSASS without alerts.
lsasscredential-dumpingwer+2
Main Stage·44 min
Kyle Avery
Kyle Avery presents techniques for evading in-memory scanners (PE-sieve, Moneta, YARA), demonstrating advanced sleep obfuscation and heap encryption.
memory-scanningyarape-sieve+2
Main Stage·32 min
Michael Bargury
Michael Bargury weaponizes Windows 11's built-in Power Automate for desktop, creating zero-binary, signatureless 'no-code malware' that bypasses EDR controls.
power-automateno-codemalware+2
Main Stage·26 min
Tarek Abdelmotaleb · Bramwell Brizendine
Tarek Abdelmotaleb and Dr. Bramwell Brizendine demonstrate weaponizing Windows syscalls into pure position-independent shellcode, evading modern EDR hooks.
syscallsshellcodeedr-evasion+2
Adversary Village·42 min
Matthew Eidelberg
Matthew Eidelberg breaks down the mechanics of modern EDR evasion, demonstrating API unhooking, AMSI bypasses, and indirect system calls in offensive payloads.
edr-evasionpayloadsamsi+2
Adversary Village·37 min
Gil Biton
Gil Biton demonstrates building automated CI/CD weaponization pipelines to scale red team payload generation, obfuscation, and EDR evasion testing.
offensive-pipelineweaponizationci-cd+2
Main Stage·46 min
Ben Kurtz
Ben Kurtz breaks down the mechanics of developing offensive Golang malware, demonstrating EDR evasion techniques, memory injection, and cross-platform compilation.
golangmalware-developmentedr-evasion+2
Red Team Village·1 hr
Eduardo Arriols
Eduardo Arriols breaks down stealthy backdoor deployment and persistent access techniques across enterprise Windows networks, evading blue team hunts.
persistencebackdoorc2+2
Red Team Village·54 min
Gabriel Ryan
Gabriel Ryan introduces DropEngine, a modular framework for generating polymorphic, malleable shellcode runners designed to evade modern EDR solutions.
dropenginedroppershellcode-runner+2
Main Stage·48 min
Itzik Kotler
Comprehensive catalog of 15+ Windows process injection techniques with detection signatures and evasion analysis for each.
process-injectionwindowsedr-evasion+2