Defence blues

Evasion runbooks

Red wilds
Privacy greenhouse
Purple crossroads
Indigo observatory
Contact

Initializing search

Defence blues

Mostly harmless, occasionally heroic:
Mostly harmless, occasionally heroic:
Going places:
Going places:
Middle ground:
Middle ground:
- Persistence
- Buffer overflows
- Reverse engineering
- Steganography
- Cryptanalysis
- Evasion
  Evasion
  - Evasion notes
  - Evasion runbooks
    
    Evasion runbooks
    
    Detecting LoLbin abuse
    
    Detecting fileless and in-memory execution
    
    Detecting BYOVD attacks
    
    Threat hunting for evasion techniques
  - Evasion runbooks Evasion runbooks
    Table of contents
    
    Detecting LoLbin abuse
    
    Detecting fileless and in-memory execution
    
    Detecting BYOVD attacks
    
    Threat hunting for evasion techniques
Active defence:
Active defence:
- Honeytech for humans

Evasion runbooks¶

Detection and investigation runbooks:

Detecting LoLbin abuse
Detecting fileless and in-memory execution
Detecting BYOVD attacks
Threat hunting for evasion techniques

2026-03-23 22:53

© Copyright 2025, TyMyrddin.

Created using Sphinx 7.2.6. and Sphinx-Immaterial

Made with love in the Unseen University, 2025, with a forest garden fostered by /ut7