| Parent directory/ | - | - |
| 8. EDR Evasion/ | - | 2023-Oct-24 12:19 |
| 5. Defence Evasion/ | - | 2023-Oct-24 12:19 |
| 2. C2 Infrastructure/ | - | 2023-Oct-24 12:19 |
| 7. Windows Defender Application Control/ | - | 2023-Oct-24 12:19 |
| 1. Getting Started/ | - | 2023-Oct-24 12:19 |
| 3. Windows APIs/ | - | 2023-Oct-24 12:19 |
| 6. Attack Surface Reduction/ | - | 2023-Oct-24 12:19 |
| 4. Process Injection/ | - | 2023-Oct-24 12:19 |
| 1. Course Introduction.png | 266.8 KiB | 2023-Oct-23 14:13 |
| 10. HTTPS Listener for Redirector.png | 15.2 KiB | 2023-Oct-23 14:13 |
| 15. External C2.png | 5.2 KiB | 2023-Oct-23 14:13 |
| 14. External C2.png | 15.1 KiB | 2023-Oct-23 14:13 |
| 12. C2 Resiliency.png | 10.1 KiB | 2023-Oct-23 14:13 |
| 11. User Agent Rules.png | 8.0 KiB | 2023-Oct-23 14:13 |
| 16. MessageBox in C++.png | 15.6 KiB | 2023-Oct-23 14:13 |
| 13. C2 Resiliency.png | 25.6 KiB | 2023-Oct-23 14:13 |
| 22. DInvoke.png | 16.6 KiB | 2023-Oct-23 14:13 |
| 21. MessageBox in VBA.png | 6.0 KiB | 2023-Oct-23 14:13 |
| 17. MessageBox in C++.png | 14.3 KiB | 2023-Oct-23 14:13 |
| 2. Accessing Snap Labs.png | 44.9 KiB | 2023-Oct-23 14:13 |
| 19. Ordinals.png | 44.9 KiB | 2023-Oct-23 14:13 |
| 20. Ordinals.png | 36.7 KiB | 2023-Oct-23 14:13 |
| 18. MessageBox in C#.png | 13.7 KiB | 2023-Oct-23 14:13 |
| 27. NtMapViewOfSection.png | 71.2 KiB | 2023-Oct-23 14:13 |
| 25. CreateRemoteThread.png | 70.5 KiB | 2023-Oct-23 14:13 |
| 28. SpawnTo.png | 3.9 KiB | 2023-Oct-23 14:13 |
| 26. QueueUserAPC.png | 70.6 KiB | 2023-Oct-23 14:13 |
| 24. CreateThread.png | 71.9 KiB | 2023-Oct-23 14:13 |
| 23. MessageBox with DInvoke.png | 50.4 KiB | 2023-Oct-23 14:13 |
| 30. SpawnTo.png | 3.5 KiB | 2023-Oct-23 14:13 |
| 31. PPID Spoofing.png | 32.3 KiB | 2023-Oct-23 14:13 |
| 3. Accessing Snap Labs.png | 10.8 KiB | 2023-Oct-23 14:13 |
| 29. SpawnTo.png | 17.4 KiB | 2023-Oct-23 14:13 |
| 33. PPID Spoofing.png | 11.3 KiB | 2023-Oct-23 14:13 |
| 34. Command Line Spoofing.png | 8.9 KiB | 2023-Oct-23 14:13 |
| 32. PPID Spoofing.png | 3.1 KiB | 2023-Oct-23 14:13 |
| 36. Command Line Spoofing.png | 15.6 KiB | 2023-Oct-23 14:13 |
| 37. Session Prepping.png | 69.4 KiB | 2023-Oct-23 14:13 |
| 35. Command Line Spoofing.png | 9.6 KiB | 2023-Oct-23 14:13 |
| 40. Session Prepping.png | 6.4 KiB | 2023-Oct-23 14:13 |
| 39. Session Prepping.png | 70.5 KiB | 2023-Oct-23 14:13 |
| 42. Session Prepping.png | 2.7 KiB | 2023-Oct-23 14:13 |
| 38. Session Prepping.png | 6.0 KiB | 2023-Oct-23 14:13 |
| 4. Accessing Snap Labs.png | 33.1 KiB | 2023-Oct-23 14:13 |
| 41. Session Prepping.png | 2.8 KiB | 2023-Oct-23 14:13 |
| 43. Session Prepping.png | 3.7 KiB | 2023-Oct-23 14:13 |
| 48. RWX _ Cleanup.png | 19.9 KiB | 2023-Oct-23 14:13 |
| 46. Event Tracing for Windows (ETW).png | 15.3 KiB | 2023-Oct-23 14:13 |
| 45. Event Tracing for Windows (ETW).png | 14.4 KiB | 2023-Oct-23 14:13 |
| 47. RWX _ Cleanup.png | 70.9 KiB | 2023-Oct-23 14:13 |
| 44. Image Load Events.png | 19.4 KiB | 2023-Oct-23 14:13 |
| 49. RWX _ Cleanup.png | 2.9 KiB | 2023-Oct-23 14:13 |
| 50. Sleep Mask Kit.png | 14.0 KiB | 2023-Oct-23 14:13 |
| 52. Sleep Mask Kit.png | 81.4 KiB | 2023-Oct-23 14:13 |
| 5. Accessing Snap Labs.png | 5.2 KiB | 2023-Oct-23 14:13 |
| 51. Sleep Mask Kit.png | 2.3 KiB | 2023-Oct-23 14:13 |
| 53. Sleep Mask Kit.png | 19.9 KiB | 2023-Oct-23 14:13 |
| 55. Thread Stack Spoofing.png | 6.6 KiB | 2023-Oct-23 14:13 |
| 54. Thread Stack Spoofing.png | 47.7 KiB | 2023-Oct-23 14:13 |
| 59. Thread Stack Spoofing.png | 7.5 KiB | 2023-Oct-23 14:13 |
| 56. Thread Stack Spoofing.png | 6.2 KiB | 2023-Oct-23 14:13 |
| 58. Thread Stack Spoofing.png | 14.7 KiB | 2023-Oct-23 14:13 |
| 57. Thread Stack Spoofing.png | 14.2 KiB | 2023-Oct-23 14:13 |
| 61. Block Child Processes.png | 13.9 KiB | 2023-Oct-23 14:13 |
| 65. Block Child Processes.png | 7.9 KiB | 2023-Oct-23 14:13 |
| 60. Thread Stack Spoofing.png | 2.7 KiB | 2023-Oct-23 14:13 |
| 64. Block Child Processes.png | 3.5 KiB | 2023-Oct-23 14:13 |
| 63. Block Child Processes.png | 15.4 KiB | 2023-Oct-23 14:13 |
| 62. Block Child Processes.png | 17.3 KiB | 2023-Oct-23 14:13 |
| 66. Block Child Processes.png | 13.4 KiB | 2023-Oct-23 14:13 |
| 72. Block PsExecWMI.png | 12.5 KiB | 2023-Oct-23 14:13 |
| 67. Block Win32 APIs.png | 6.8 KiB | 2023-Oct-23 14:13 |
| 69. Block Win32 APIs.png | 17.2 KiB | 2023-Oct-23 14:13 |
| 68. Block Win32 APIs.png | 11.9 KiB | 2023-Oct-23 14:13 |
| 70. Block Code Injection.png | 28.1 KiB | 2023-Oct-23 14:13 |
| 71. Block Code Injection.png | 69.3 KiB | 2023-Oct-23 14:13 |
| 74. Block PsExecWMI.png | 13.0 KiB | 2023-Oct-23 14:13 |
| 73. Block PsExecWMI.png | 166.4 KiB | 2023-Oct-23 14:13 |
| 77. Trusted Signers.png | 16.7 KiB | 2023-Oct-23 14:13 |
| 76. Trusted Applications.png | 13.4 KiB | 2023-Oct-23 14:13 |
| 75. Block PsExecWMI.png | 88.9 KiB | 2023-Oct-23 14:13 |
| 81. Trusted Signers.png | 7.9 KiB | 2023-Oct-23 14:13 |
| 83. Trusted Signers.png | 14.7 KiB | 2023-Oct-23 14:13 |
| 78. Trusted Signers.png | 17.2 KiB | 2023-Oct-23 14:13 |
| 8. Apache Installation.png | 26.1 KiB | 2023-Oct-23 14:13 |
| 82. Trusted Signers.png | 9.2 KiB | 2023-Oct-23 14:13 |
| 80. Trusted Signers.png | 3.6 KiB | 2023-Oct-23 14:13 |
| 79. Trusted Signers.png | 10.6 KiB | 2023-Oct-23 14:13 |
| 9. Generate SSL Certificates.png | 26.9 KiB | 2023-Oct-23 14:14 |
