Name                                     Size  
 Parent Directory                           -   
 8. EDR Evasion/                            -   
 7. Windows Defender Application Control/   -   
 6. Attack Surface Reduction/               -   
 5. Defence Evasion/                        -   
 4. Process Injection/                      -   
 3. Windows APIs/                           -   
 2. C2 Infrastructure/                      -   
 1. Getting Started/                        -   
 1. Course Introduction.png               267K  
 73. Block PsExecWMI.png                  166K  
 75. Block PsExecWMI.png                   89K  
 52. Sleep Mask Kit.png                    81K  
 24. CreateThread.png                      72K  
 27. NtMapViewOfSection.png                71K  
 47. RWX _ Cleanup.png                     71K  
 26. QueueUserAPC.png                      71K  
 25. CreateRemoteThread.png                71K  
 39. Session Prepping.png                  70K  
 37. Session Prepping.png                  69K  
 71. Block Code Injection.png              69K  
 23. MessageBox with DInvoke.png           50K  
 54. Thread Stack Spoofing.png             48K  
 2. Accessing Snap Labs.png                45K  
 19. Ordinals.png                          45K  
 20. Ordinals.png                          37K  
 4. Accessing Snap Labs.png                33K  
 31. PPID Spoofing.png                     32K  
 70. Block Code Injection.png              28K  
 9. Generate SSL Certificates.png          27K  
 8. Apache Installation.png                26K  
 13. C2 Resiliency.png                     26K  
 53. Sleep Mask Kit.png                    20K  
 48. RWX _ Cleanup.png                     20K  
 44. Image Load Events.png                 19K  
 29. SpawnTo.png                           17K  
 62. Block Child Processes.png             17K  
 78. Trusted Signers.png                   17K  
 69. Block Win32 APIs.png                  17K  
 77. Trusted Signers.png                   17K  
 22. DInvoke.png                           17K  
 16. MessageBox in C++.png                 16K  
 36. Command Line Spoofing.png             16K  
 63. Block Child Processes.png             15K  
 46. Event Tracing for Windows (ETW).png   15K  
 10. HTTPS Listener for Redirector.png     15K  
 14. External C2.png                       15K  
 58. Thread Stack Spoofing.png             15K  
 83. Trusted Signers.png                   15K  
 45. Event Tracing for Windows (ETW).png   14K  
 17. MessageBox in C++.png                 14K  
 57. Thread Stack Spoofing.png             14K  
 50. Sleep Mask Kit.png                    14K  
 61. Block Child Processes.png             14K  
 18. MessageBox in C#.png                  14K  
 66. Block Child Processes.png             13K  
 76. Trusted Applications.png              13K  
 74. Block PsExecWMI.png                   13K  
 72. Block PsExecWMI.png                   13K  
 68. Block Win32 APIs.png                  12K  
 33. PPID Spoofing.png                     11K  
 3. Accessing Snap Labs.png                11K  
 79. Trusted Signers.png                   11K  
 12. C2 Resiliency.png                     10K  
 35. Command Line Spoofing.png            9.6K  
 82. Trusted Signers.png                  9.2K  
 34. Command Line Spoofing.png            8.9K  
 11. User Agent Rules.png                 8.0K  
 65. Block Child Processes.png            7.9K  
 81. Trusted Signers.png                  7.9K  
 59. Thread Stack Spoofing.png            7.5K  
 67. Block Win32 APIs.png                 6.8K  
 55. Thread Stack Spoofing.png            6.6K  
 40. Session Prepping.png                 6.4K  
 56. Thread Stack Spoofing.png            6.2K  
 21. MessageBox in VBA.png                6.0K  
 38. Session Prepping.png                 6.0K  
 5. Accessing Snap Labs.png               5.2K  
 15. External C2.png                      5.2K  
 28. SpawnTo.png                          3.9K  
 43. Session Prepping.png                 3.7K  
 80. Trusted Signers.png                  3.6K  
 64. Block Child Processes.png            3.5K  
 30. SpawnTo.png                          3.5K  
 32.  PPID Spoofing.png                   3.1K  
 49. RWX _ Cleanup.png                    2.9K  
 41. Session Prepping.png                 2.8K  
 60. Thread Stack Spoofing.png            2.7K  
 42. Session Prepping.png                 2.7K  
 51. Sleep Mask Kit.png                   2.3K