Hi everyone, I spend some of my free time chasing random Red Team ideas. Not necessarily vulnerabilities or privilege escalation bugs; sometimes I just wonder whether I can make telemetry tell a slightly different story from what actually happened. While […]
Tag: RedTeam
Disabling EDR via PendingFileRenameOperations
Hi everyone, Today, I will try my best to explain how we can disable EDR products that do not have anti-tampering protection. Before diving into the topic, it would be beneficial to briefly touch on some key concepts. Anti-Tampering Protection:Modern […]


