INFO:

The Cymulate Offensive Research Group, and one of its lead researchers, Ilan Kalendarov, were able to extend the methodology into a new technique named “Blindside” to allow for the method to work on a broader scale. Instead of hooking a specific function, the Blindside technique instead loads a non-monitored and unhooked DLL and leverages debug techniques that could allow for running arbitrary code. This permits more flexibility in what code can be executed outside the watchful eye of many commercial EDR and XDR platforms. Read our blog to learn more: https://cymulate.com/blog/blindside-a-new-technique-for-edr-evasion-with-hardware-breakpoints --- Website: https://www.cymulate.com Twitter: https://twitter.com/Cymulateltd LinkedIn: https://www.linkedin.com/company/cymulate/ --- The Cymulate cybersecurity risk validation and exposure management solution provide security professionals with the ability to continuously challenge, validate and optimize their on-premises and cloud cyber-security posture with end-to-end visualization across the MITRE ATTu0026CK® framework. The platform provides automated, expert, and threat intelligence-led risk assessments that are simple to deploy and easy for organizations of all cybersecurity maturity levels to use. It also provides an open framework for creating and automating red and purple teaming exercises by generating tailored penetration scenarios and advanced attack campaigns for their unique environments and security policies. Visit www.cymulate.com to learn more.