Defense Evasion 10
- Reinventing PowerShell in C/C++
- Ghost in the PPL Part 3: LSASS Memory Dump
- Ghost in the PPL Part 2: From BYOVDLL to Arbitrary Code Execution in LSASS
- Ghost in the PPL Part 1: BYOVDLL
- Bypassing PPL in Userland (again)
- Revisiting a Credential Guard Bypass
- Bypassing LSA Protection in Userland
- Do You Really Know About LSA Protection (RunAsPPL)?
- VBA RunPE - Breaking Out of Highly Constrained Desktop Environments - Part 2/2
- VBA RunPE - Breaking Out of Highly Constrained Desktop Environments - Part 1/2