Blog
Using SYN port scans with source IP spoofing for offensive deception
08 January 2025Deliberately triggering service enumeration alerts for offensive deception.
Revisiting MiniFilter Abuse Techniques to Blind EDR
18 September 2024Revisiting minifilter abuse techniqes to blinding EDR.
Effective EDR Telemetry Blocking via Person-in-the-Middle Network Filtering Attacks
23 July 2024Blocking EDR telemetry via PitM network filtering attacks
Microsoft Entra Connect: Connect Sync vs Cloud Sync through a hacker's view
21 May 2024The distinction between traditional Connect Sync and the new Cloud Sync lies in the shifting TTPs from a hacker's perspective.
Contact
Get in touch