Striking from the Shadows: Applying and Analyzing Mitigation Techniques to Bypass Antivirus Payload Detection

During red team engagements and penetration tests, understanding how the presence of antivirus software will affect exploitation can make or break the success of an individual or team. With thorough reconnaissance and enumeration, it is possible to predict what will reinforce the target...

By

Matthew O'Rouke

October 6, 2021

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Cybersecurity and IT Essentials, Penetration Testing and Red Teaming

December 6, 2022

Don’t Miss the 2022 SANS Holiday Hack Challenge – Now Open for Free Play

SANS’s annual festive gift to the cyber community is back with a new supervillain to thwart.

Offensive Operations, Penetration Testing and Red Teaming

November 14, 2022

A Visual Summary of SANS Pen Test HackFest Summit 2022

On November 14-15, attendees joined us in Arlington, VA or tuned in Live Online for the SANS Pen Test HackFest Summit! We invited Ashton Rodenhiser of Mind's Eye Creative to create graphic recordings of our Summit presentations. If you missed a talk or are looking to view the Summit through a...

Offensive Operations, Penetration Testing and Red Teaming

Searching SMB Share Files

Like a tech writer in the 90s, I set out to review tools for indexing and searching file names as well as common patterns of data in SMB shares.