TGViewer
Reverse Dungeon Reverse Dungeon @reverse_dungeon · 4.99K subscribers
Post #4129 2.4K

Forwarded from Order of Six Angles

A full reverse-engineering teardown of the CrowdStrike Falcon sensor

https://0xdbgman.github.io/posts/inside-the-falcon-how-crowdstrike-catches-you/
DbgMan Inside the Falcon How CrowdStrike Catches You A full reverse-engineering teardown of the CrowdStrike Falcon sensor: the six kernel callback sources, the WFP network engine, the file-system minifilter, the cspcm4 broker, the user-mode service (DNS / AMSI / browser / Identity Protection), and the cloud…
  • 🐳 4
  • ❤ 2
  • ❤‍🔥 1
Open in Telegram All posts from @reverse_dungeon
More from @reverse_dungeon
  1. Sep 20, 2026https://bogdanthegeek.github.io/blog/projects/vapeserver/
  2. Sep 18, 2026Golang loader that uses vulnerable drivers to terminate EDR and antivirus processes before…
  3. Sep 16, 2026www.f6.ru/blog/fmvt-rat
  4. Sep 9, 2026https://hunt.io/blog/redis-cryptomining-botnet-3562-servers TL;DR: Челы из Hunt.io вскрыли…
  5. Aug 31, 2026https://securelist.ru/tr/armored-likho-campaigns-with-busysnake-rat-and-kharon-rat/116658
  6. Aug 31, 2026https://securelist.ru/android-head-unit-malware/116567
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →