Simone AonzoDear Windows Defender, please tell me where I can drop my malicious code.The Get-MpPreference cmdlet exposes the field ExclusionPath without administrator privilege.Mar 24, 20203Mar 24, 20203
Simone AonzoThe importance of Data Execution Prevention in malware analysisI wrote this (unpretentious) article to share an interesting spot that I have found while I was reversing an APT-linked sample (VT report)…Aug 2, 2019Aug 2, 2019