youtor.org
How EDRs work and how to bypass them Processus 🇫🇷
>> YOUR LINK HERE: ___ http://youtube.com/watch?v=TsRzxeHJJt4
I would like to speak about how Endpoint Detection and Response (EDR) softwares work and how to defeat every protection, such as AMSI, Sysmon, DLL Hooking or ETW. • The goal of this talk is to allow a good understanding of these protections IN FRENCH, because many presentations on this subject are only in english. • I would like to present according to the following plan : – Process Hollowing and PE Injection – AMSI Bypass – .NET Reflection – Unhooking DLL – Sysmon unloading – ETW Patching • leHACK website: https://www.lehack.org • leHACK's twitter: / _lehack_ • leHACK instagram : / _lehack_
#############################
