corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07df5-21bb-71db-812f-ba085258db7d

Sensecon 23: from Windows drivers to an almost fully working EDR

SensePost · published 31 January 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sensepost.com Wayback capture
1blogs citing
First cited
7 Feb 2025
Most recent
7 Feb 2025
Rank this month
not ranked
Links from this post
39
Words captured
8,810

Cited by

Blog
In the post
Date
fluxsec.red
Intro and plan for the Sanctum EDR Read at the source ↗
7 Feb 2025

Links from this post

Link
Host
https://github.com/sensepost/mydumbedr
github.com
https://en.wikipedia.org/wiki/Timeline_of_computer_viruses_and_worms
en.wikipedia.org
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/ec414e5f4e7b964432e972e27423a273.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/34f44216ed113994e61a349b0c483263.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/25c93241325de46defc829d8e58f87fe.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/5c701d52771e235da3f8ba422b37c02a.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/f3750a7d1ea2b1cd7019dc49323565a9.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/d6393afb6aa7778014423865c0bd139b.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/692c255989c9a4d3a394d1f4f8d63a7e.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/e58ae10fb21b7993793d40f3b6703e75.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/5f16e9728d4c278dfd11155337e47e41.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/c5a3a7f2a4f943f9870fad2e54194bbb.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/efa4f9f3ee897eaa23d57baf257f28b6.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/ce97b6fb7e7be715bf75697359cd7df8.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/e2bc42df384aa8aa2db566174bd2cd45.png
sensepost.com
https://learn.microsoft.com/en-us/sysinternals/downloads/winobj
learn.microsoft.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/9f09358c0fa90d575c22b3e147ae9960.png
sensepost.com
https://github.com/microsoft/Windows-driver-samples
github.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/download-the-wdk
learn.microsoft.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/32462562aa759b9637df0822e552dae1.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/0abfd7baba09bbf8628d49c5afc991d1.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/c5dd413722a9ec74db7f0347d8cd58be.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/e512abfe5e10cbe17d753e12f88b3718.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/90f369638acdc5e1bba1c28c774d872c.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/f02ef5da9c4eb3a039a2d62a1a5f2aea.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/9e13e0e0b6a291c8e2c1d07510d48907.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/d2201bdb180e878f5e1abdc242d001af.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/0d487e5affd06d6cddce10fbd9df1070.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/f82ce7a93e6b3534e09cde76cf49220d.png
sensepost.com
https://github.com/br-sn/CheekyBlinder
github.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/a6855a5a2f5d2a161ca2ab9ce0db17cc.png
sensepost.com
Building an offensive RPC interface Read at the source ↗
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/90a87c57c4a47d5bbf003a2c4c868893.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/4dd43bf24f03a986a3dbaf336c008d1a.png
sensepost.com
https://github.com/TsudaKageyu/minhook
github.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/59d924bc7c362a60fcd76cbb4bc2c0a5.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/089c693dada76bbf3e6f49cdb9523444.png
sensepost.com
https://sensepost.com/img/pages/blog/2024/sensecon-23-from-windows-drivers-to-an-almost-fully-working-edr/0a69db5c1a1f04e97a73d36d4e647f83.png
sensepost.com
https://blog.whiteflag.io/blog/from-windows-drivers-to-a-almost-fully-working-edr/
blog.whiteflag.io