corpus.blog
43,317 blogs · 5,519,570 posts Claim your blog
Record · corpus.blog/posts/01a0821a-f74f-7216-9ec5-04f4e542efa0

Investigating .NET CLR Usage Log Tampering Techniques For EDR Evasion (Part 2)

Bohops · published 22 August 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bohops.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
12
Words captured
1,861

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://stackoverflow.com/questions/20620348/how-and-when-does-ngen-exe-work
stackoverflow.com
https://docs.microsoft.com/en-us/dotnet/api/system.io.directory.setaccesscontrol?view=netframework-4.8
docs.microsoft.com
https://www.mdsec.co.uk/2020/03/hiding-your-net-etw/
mdsec.co.uk
https://twitter.com/_xpn_?lang=en
twitter.com
https://rastamouse.me/memory-patching-amsi-bypass/
rastamouse.me
https://twitter.com/_RastaMouse
twitter.com
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
docs.microsoft.com
https://github.com/anthemtotheego/InlineExecute-Assembly
github.com
https://docs.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-createfilew
docs.microsoft.com
https://www.tiraniddo.dev/2019/02/
tiraniddo.dev
https://superuser.com/questions/560675/how-to-monitor-folder-permission-changes
superuser.com
https://twitter.com/Cyb3rWard0g
twitter.com
Elsewhere on bohops.com (1)