windows
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| EDR-Freeze |
|
1 | 47 | September 24, 2025 |
| SOURCE missing from SENSITIVE_PROCESS_ACCESS |
|
0 | 37 | July 22, 2025 |
| Detecting Suspicious LSASS Access + Template String Example |
|
1 | 89 | July 22, 2025 |
| Help with Windows Defender false positives from Endpoint Protection |
|
1 | 63 | July 11, 2025 |
| Outside Business Hours Logon Detection |
|
4 | 81 | March 27, 2025 |
| Detecting Unauthorized Removable Media |
|
0 | 40 | March 7, 2025 |
| Developing A Baseline For Sensitive Process Access |
|
0 | 32 | February 18, 2025 |
| Obfuscation in CLI arguments |
|
0 | 30 | February 14, 2025 |
| Automating Artifact Collection Upon Waking Sleeper Agents |
|
0 | 24 | February 14, 2025 |