On-Disk Detection: Bypass AV’s/EDR’s using syscalls with legacy instruction, series of instructions and random nop instructions

Blogs
On-Disk Detection: Bypass AV’s/EDR’s using syscalls with legacy instruction, series of instructions and random nop instructions

Cytomate

Tech Team

13.Apr.2023

In this article

On-Disk Detection: Bypass AV’s/EDR’s using syscalls with legacy instruction, series of instructions and random nop instructions

Now I am going to explain on-disk detection and how to bypass this detection. Syscalls are really hard topic and with the help of SysWhispers2 you can simply generate ASM/H pair and can use in your project. I am going to explain how to use syswhispers2 because you can see detail instructions on syswhispers2 repository. More

Discover the Unknown

Emulate real-world cyber attacks within minutes and gain a comprehensive understanding of your security posture
Contact Us!