Infiltr8: The Red-Book
Ctrlk
Infiltr8ForumGitHub
  • The Red-Book
  • Red-Teaming
    • Reconnaissance
    • Execution
    • Initial Access
    • Persistence
    • Defense Evasion
      • Endpoint Detection Respons (EDR) Bypass
        • Bring Your Own Vulnerable Driver (BYOVD)
        • Safe Mode With Networking
        • Windows Defender Application Control (WDAC): Killing EDR
        • 🛠️Load Unsigned Drivers
        • 🛠️Minifilter Altitude
        • 🛠️Hypervisor Code Integrity (HVCI) Disallowed Images
        • 🛠️Windows Filtering Platform (WFP)
        • 🛠️Userland Hooking Bypass
      • UAC Bypass
      • AMSI Bypass
      • ETW evasion
      • Living Off The Land
      • Signature Evasion
      • Obfuscation
      • AppLocker Bypass
      • Mark-of-the-Web (MotW) Bypass
      • 🛠️PowerShell Constrained Language Mode (CLM) Bypass
      • 🛠️Kill Windows Defender
      • 🛠️Virtualization-based security (VBS) Bypass
      • 🛠️Sandbox Evasion
    • Discovery
    • Privilege Escalation
    • Credential Access
    • Lateral Movement
    • Exfiltration
  • Web Pentesting
    • Reconnaissance
    • Infrastructures
    • Web Vulnerabilities
  • Network Pentesting
    • Network services
    • WiFi
    • Bluetooth
  • Active Directory Pentesting
    • Reconnaissance
    • Movement
    • Persistence
  • 🛠️Cloud & CI/CD Pentesting
    • CI/CD
    • Azure Pentesting
    • GCP Pentesting
    • AWS Pentesting
  • 🛠️Smart Contracts Pentesting
    • Solidity
Powered by GitBook
On this page

Was this helpful?

Edit
  1. Red-Teaming
  2. Defense Evasion
  3. Endpoint Detection Respons (EDR) Bypass

🛠️Hypervisor Code Integrity (HVCI) Disallowed Images

https://valhalla.nextron-systems.com/info/sigma-rule/cf68c9d6-4cd8-40e1-8d96-adb6092bf5de https://x.com/yarden_shafir/status/1822667605175324787

Last updated 1 year ago

Was this helpful?