Gluing Windows "features" to get into PPL process without BYOVD, by Nathan Blondel #redteam #maldev blog.slowerzs.net/posts/pplsyste…

To Sysmon or not to Sysmon... by Alex Teixeira #redteam #maldev detect.fyi/sysmon-a-viabl…

Bypassing HVCI within the root partition, by Satoshi Tanda #redteam #maldev tandasat.github.io/blog/2024/01/1…

Hunting for user tokens with CS Beacon, by soka #redteam #maldev sokarepo.github.io/redteam/2024/0…

Sinkholing EDR telemetry with Python Scapy and dynamic iptable rules, by Eito Tamura (eitot) #redteam #maldev tierzerosecurity.co.nz/2024/07/23/edr…

🎉 A HUGE thank you to our amazing prize sponsors! 🎉 Your generous contributions help make the RTV experience unforgettable. We're incredibly grateful for your support. 🙌 BC Security Millennium Corporation No Starch Press SANS Institute PentesterLab The SecOps Group RTFM

Injection detection with network artifacts, by Ofir Shen of Akamai Technologies. #redteam #maldev akamai.com/blog/security-…

SEKTOR7 teams up again with RedTeamVillage @ DEFCON32. And, as usual, we have a discount for you! 20% off on all our courses. Promo ends Sunday EoD (Zulu time). Coupon link: institute.sektor7.net/?coupon=DEFCON… Have fun and a great con, y'all! #redteam #onlinelearning #RTO DEF CON

A tale of Windows Defender Logs, by DFIR Spot #redteam #maldev thedfirspot.com/post/windows-d…

Defender's decoys are in da'house!, by Dylan 🎃AttacktheSOC #redteam #maldev attackthesoc.com/posts/stacking…

Game dev in the making...

Incoming hotpatching feature changing CFG in Windows, by ynwarcs #redteam #maldev ynwarcs.github.io/Win11-24H2-CFG

Tunneling TCP via a file, by Fidel Perez-Smith #redteam #maldev github.com/fiddyschmitt/F…

A journey to building a custom EDR, by Aurélien Chalot #redteam #maldev blog.whiteflag.io/blog/from-wind…

A story of Asynchronous Procedure Calls in Windows, by the one and only, Pavel Yosifovich (Pavel Yosifovich) #redteam #maldev scorpiosoftware.net/2024/07/24/wha…

Seeking suspicious named pipes, by mthcht detect.fyi/threat-hunting…

Thread Name-Calling - a new recipe for code injection, by hasherezade #redteam #maldev research.checkpoint.com/2024/thread-na…

Kernel-based rootkits in your favorite game? A Duck Test against popular anti-cheat systems, by Christoph Dorner and Lukas Daniel Klausner. #redteam #maldev arxiv.org/html/2408.0050…