Post #827 70 Mar 18, 2020, 13:19 UTC Hiding your .NET - Event Tracing for Windows https://www.mdsec.co.uk/2020/03/hiding-your-net-etw/ MDSec Hiding Your .NET – ETW - MDSec After the introduction of PowerShell detection capabilities, attackers did what you expect and migrated over to less scrutinised technologies, such as .NET. Fast-forward a few years and many of us...