Aurélien Chalot
@Defte_
Followers
3K
Following
3K
Statuses
1K
Hacker, sysadmin and security researcher @OrangeCyberdef 💻 Calisthenic enthousiast 💪 and wannabe philosopher https://t.co/SqDDhIGGGh 📖 🔥 Hide&Sec 🔥
The grid
Joined November 2017
I have seen lot of stupid things lately concerning CS, EDR's and Windows drivers. I wrote a, not so bad I guess, long blog post explaining how to build a windows driver, why EDR's need them, and how EDR's work, might be helpful 🤪
6
158
497
@never_unsealed Of course but my point is that you can limit the things you trust. The probability that someone exploits a hypervisor vuln is much lower than a pentester running psexec exe on your system ✌🏻
0
0
3
can be found here and you will also find advanced ways of detecting PsExec.exe on your network in the blog post directly 🔥
1
14
72
See you there 😎
🚨 The Insomni’hack 2025 Conferences Programme is LIVE! 📅 2 days, top experts, & cutting-edge cybersecurity talks. Get your tickets now: #INSO25 #Cybersecurity #EthicalHacking #Switzerland
0
0
2
@techspence But I'd say who cares ahah! As long as you can do your stuff, use PowerShell it doesn't matter!! I'm just using Python because I have learned that way :P
1
0
1
@_RastaMouse Isn't the first call used to retrieve the size of the buffer and the second one to actually get the info? I believe I had the same thing a while back
1
0
2
@SkelSec @_RastaMouse Internet remembers ahah but yeah, manipulating credentials is so overrated nowadays considering you can just run task as someone else 😴
0
0
0