Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST - optiv/Freeze.rs

PoCs and tools for investigation of Windows process execution techniques - daem0nc0re/TangledWinExec

更多技术交流、求职机会，欢迎关注字节跳动数据平台微信公众号，回复【1】进入官方交流群 本文为字节跳动基于数据湖技术的近实时场景实践，主要包括以下几部分内容：数据湖技术的特性、近实时技术的架构、电商数仓实践、未来的挑战与规划。 数据湖技术特性 1.数据湖概念 从数据研发与应用的角度，数据湖技术具有以下

Threat actors have moved to other means of initial access, such as ISO files combined with LNKs or OneNote payloads, but some appearances of VBA macros in Office documents can still be seen in use. In this case we document an incident taking place during…

Kaspersky analysis of the CloudWizard APT framework used in a campaign in the region of the Russo-Ukrainian conflict.