What the Vuln: EDR Bypass with LoLBins

[@ctrlesc-xyz]

I miss DHA and 0dayallday. I need to start attending again.

[@alexdhital3095]

Awesome

[@SajidQureshi__]

great video but i have a question can't we just disable the EDR when we want to exexcute the agent and then reenable after our agent ran

[@RaiqueFamilia]

You would first have to bypass it even before running it before even thinking about disabling it, and if you managed to bypass, why would you care about disabling it if you are undetected anyway?