Login
From:
CODE WHITE | Red Teaming & Attack Surface Management
(Uncensored)
subscribe
[Blog] Attacks on Sysmon Revisited - SysmonEnte
https://code-white.com/blog/2022-09-attacks-on-sysmon-revisited-sysmonente/
links
backlinks
Roast topics
Find topics
Find it!
In this blogpost we demonstrate an attack on the integrity of Sysmon which generates a minimal amount of observable events making this attack difficult to detect in environments where no additional security products are installed.