Tetragone: A Lesson in Security Fundamentals
An article by Pawel Wieczorkiewicz and Brad Spengler about bypassing post-exploitation detection provided by Tetragon.
The article also expands on the impossibility of preventing malicious post-exploitation activity if the prevention component works at the same privilege level as the attacked code.
Similar concerns affect LKRG. Check out the LKRG bypass article by Alexander Popov for the details.
Post #165
2.31K