Netcrook
#EDR evasion
Windows QoS Turns Into an EDR Blind Spot
A newly disclosed red-team tool shows how a built-in policy feature can be repurposed to interfere with endpoint security visibility, without touching the usual tampering points.
A Ransomware Brand With Old Habits and New Evasion Tricks
Payouts King is being described as a post-BlackBasta threat that pairs social engineering overlap with code designed to frustrate some endpoint defenses.
AI Tools Enter the Post-Exploitation Workshop, and Active Directory Is the Prize
A June 2 intrusion analysis points to AI-assisted tooling being used to speed up Active Directory work and test endpoint defenses, without proving a full breach on its own.
Inside the Windows Hideout: How a Strange Endpoint Alert Led to AI-Labeled AD Recon
A suspicious path under a user profile, a post-exploitation toolkit, and claims of AI-assisted automation point to a quieter but dangerous shift: faster identity mapping and more deliberate EDR pressure.
When a Windows Shortcut Becomes a Scanner Trap
A junction-based traversal trick shows how ordinary NTFS features can turn recursive endpoint inspection into a reliability problem.
When a ZIP File Becomes the Delivery Room for a Stealer
A reported Vidar campaign shows how staged loaders, trusted utilities, and heavy obfuscation can narrow EDR visibility long enough for credential theft to happen.