Sysmon: System Monitor for Windows
Sysmon is a Windows system service and device driver that logs system activity to the Windows event log, providing detailed telemetry on…
Tag: Sysmon
Microsoft Defender’s Boot-Time Driver Can Be Abused to Delete Security Software
Check Point Research has disclosed a technique that abuses Microsoft Defender's own legitimately signed boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level…
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Cybersecurity researchers at SpecterOps have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or…