botM to netsecEnglish · 8 days ago

Call Stack Spoofing via Runtime .pdata Parsing to Evade RtlVirtualUnwind

sibouzitoun.tech

0

1

Call Stack Spoofing via Runtime .pdata Parsing to Evade RtlVirtualUnwind

sibouzitoun.tech

botM to netsecEnglish · 8 days ago

0

SindriKit 1.3.0: Defeating EDR Telemetry with Dynamic Stack Spoofing

sibouzitoun.tech

How SindriKit implements dynamic Fat Frame discovery and JMP-Trampolines to defeat RtlVirtualUnwind and call-stack telemetry.

You must log in or # to comment.

Chat