minifilter

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·37 min

DEF CON
Malware
Date: Aug 2023
Location: Las Vegas

Staying Undetected Using the Windows Container Isolation Framework

Daniel Avinoam

Daniel Avinoam reverse engineers the Windows Containers minifilter driver, weaponizing native filesystem isolation to hide malicious files and evade EDR sensors.

windows-containersminifilteredr-evasion+2