# EDR bypass with Wietze Beukema - March 14, 2025

**URL:** https://community.limacharlie.com/t/edr-bypass-with-wietze-beukema-march-14-2025/131
**Category:** Defender Fridays
**Created:** [March 12, 2025, 11:01pm UTC](https://community.limacharlie.com/t/edr-bypass-with-wietze-beukema-march-14-2025/131 "2025-03-12T23:01:43Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![charlton](https://yyz1.discourse-cdn.com/flex033/user_avatar/community.limacharlie.com/charlton/32/17_2.png) [@charlton](https://community.limacharlie.com/u/charlton)
#### Post date: [March 12, 2025, 11:01pm UTC](https://community.limacharlie.com/t/edr-bypass-with-wietze-beukema-march-14-2025/131/1 "2025-03-12T23:01:43Z")

</div>

![Wietze_B_DF](https://canada1.discourse-cdn.com/flex033/uploads/limacharlie/original/1X/b750511a877f9b34ddfc9d1a28fb1a56da6905d8.png)

Here’s what to expect in this week’s session of Defender Fridays:

**Host:** Wietze Beukema, Lead Security Engineer  
**Topic:** [http://ArgFuscator.net](http://argfuscator.net) - a new project that helps you generate obfuscated command lines, enabling you to bypass certain EDR detections.

Defender Fridays is every Friday 10:30am PT / 1:30pm ET!

Register for the series: [Defender Fridays | LimaCharlie](https://info.limacharlie.io/defender-fridays)

---

<div class="post-metadata">

### Author: ![nicoleboydlc](https://avatars.discourse-cdn.com/v4/letter/n/c89c15/32.png) [@nicoleboydlc](https://community.limacharlie.com/u/nicoleboydlc)
#### Post date: [March 14, 2025, 6:13pm UTC](https://community.limacharlie.com/t/edr-bypass-with-wietze-beukema-march-14-2025/131/2 "2025-03-14T18:13:28Z")

</div>

Chat links from today’s sesh!

- [GitHub - Argfuscator.net](https://github.com/wietze/ArgFuscator.net)
- [Wietze’s X account](https://x.com/wietze)
- [Wietze’s LinkedIn](https://www.linkedin.com/in/wjbbeukema/)
- [Wietze’s SANS profile](https://www.sans.org/profiles/wietze-beukema/)
- [CrowdStrike 2025 Global Threat Report](https://www.dropbox.com/scl/fi/yhx1hk91ndpihaiji8wc5/CrowdStrikeGlobalThreatReport2025.pdf?rlkey=olp5rydiqrwkr4z4s424vv9gc&e=1&dl=0)
- [When Characters Turn Bad: String Sanitation Bypass via Best-Fit Mappings](https://securityintelligence.com/when-characters-turn-bad-string-sanitation-bypass-via-best-fit-mappings/)
- [Black Hat presentation: Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare](https://i.blackhat.com/BH-US-23/Presentations/US-23-stok-weponizing-plain-text-ansi-escape-sequences-as-a-forensic-nightmare-appendix.pdf)
- [argfuscator.net](https://argfuscator.net/)
- [reg.exe on argfuscator.net](https://argfuscator.net/entries/windows/reg.html)