Skip to content
Security Friends' Research Blog

Security research blog by friends, focused on practical insights

Yehuda Smirnov
  • linkedin.com/in/yehuda-smirnov/
  • X
  • GitHub
Hai Vaknin
  • linkedin.com/in/yehuda-smirnov/
  • X
  • GitHub
Hoshea Yarden
  • linkedin.com/in/yehuda-smirnov/
  • X
  • GitHub
Noam Pomerantz
  • linkedin.com/in/yehuda-smirnov/
  • GitHub
  • info@fndsec.net
  • About us
  • Blog's Github
  • ← Home

active directory (1) azure (3) bloodhound (1) cloud (1) defender for identity (1) defender_for_cloud (1) entraid (1) microsoft (1) powershell (2) process injection (1) ropc (1) security (1) sharepoint (1) tool (1) webauthn (1) whfb (1) windows (4) windows defender (2) wmi (1)

Tag: windows

  • KslD.sys – Weaponizing Windows Defender’s Own Signed Driver

  • New Process Injection Class: The CONTEXT-Only Attack Surface

  • Peeking Behind the Curtain: Finding Defender’s Exclusions

  • WMI Research and Lateral Movement

  • Subscribe Subscribed
    Security Friends' Research Blog

    Have a WordPress.com account? Log in now.

  • Security Friends' Research Blog
    View site in Reader
    Manage subscriptionsSign upLog in
    Report this content
    Collapse this bar