APT on Telegram: “Windows Event Log Evasion via Native APIs Some n…”

TGViewer Telegram Channel Viewer

APT @apt_notes · 16.8K subscribers

Post #673 671 Mar 27, 2022, 11:01 UTC

Windows Event Log Evasion via Native APIs

Some native Windows API calls can be used to install services WITHOUT generating correlating entries in the event log. This was seen in Stuxnet.

https://www.inversecos.com/2022/03/windows-event-log-evasion-via-native.html

#edr #event #log #evasion

Inversecos Windows Event Log Evasion via Native APIs

Open in Telegram All posts from @apt_notes

More from @apt_notes

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →