Striking from the Shadows: Applying and Analyzing Mitigation Techniques to Bypass Antivirus Payload Detection

During red team engagements and penetration tests, understanding how the presence of antivirus software will affect exploitation can make or break the success of an individual or team. With thorough reconnaissance and enumeration, it is possible to predict what will reinforce the target...

By

Matthew O'Rouke

October 6, 2021

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Penetration Testing and Ethical Hacking

Searching SMB Share Files

Like a tech writer in the 90s, I set out to review tools for indexing and searching file names as well as common patterns of data in SMB shares.

Red Team Operations, Penetration Testing and Ethical Hacking

November 15, 2021

A Visual Summary of SANS Pen Test HackFest Summit 2021

On November 15-16, thousands from around the globe tuned in for the SANS Pen Test HackFest Summit. These two days were filled with new tools and techniques to help attendees advance their skillset. We invited Ashton Rodenhiser to create graphic recordings of our Summit presentations. If you missed...

Penetration Testing and Ethical Hacking

October 13, 2020

Red Team Tactics: Hiding Windows Services

A little known feature of Windows allows attackers to hide persistent services from view, creating an opportunity to evade threat hunting detection.