Posts tagged blue-team

  1. edr

    NTDLL stubs, SSNs and where EDRs really watch