specterops/at-ps: Adversary Tactics - PowerShell Training
Adversary Tactics - PowerShell Training. Contribute to specterops/at-ps development by creating an account on GitHub.
Book 1
Hijacking DLLs in Windows
DLL Hijacking is a popular technique for executing malicious payloads. This post lists nearly 300 executables vulnerable to relative path DLL Hijacking on Windows 10 (1909), and shows how with a few lines of VBScript some of the DLL hijacks can be executed with elevated privileges, bypassing UAC.
LSASS Memory Dumps Are Stealthier Than Ever Before
LSASS memory dump files aid attackers to swiftly extract credentials. Read an in-depth analysis of LSASS dumps as an attack vector & dumping methods.
RTIR: RT for Incident Response - Best Practical
Request Tracker for Incident Response