jalster: all posts

  1. red-team

    Dumping LSASS on a fully-patched Windows 11 with a 2014 .exe

  2. edr

    NTDLL stubs, SSNs and where EDRs really watch