edrEvasionWorkshop

KO | EN

gitlite — search

#rust #typescript #redis #editor #csharp #ai #privacy #claude #terminal #generative-ai

edrEvasionWorkshop

(★ 229)

Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.

파일 탐색기

ZIP 다운로드

- 1._EDR_Detection_Mechanisms.pdf
- 2.1_Loader_Stomping.pdf
- 2.2_Loader_StackSpoofing.pdf
- 2.3_c2_havocCustomization.pdf
README.md
Step-by-Step Malware Development- Evading EDR from Loaders to the Kernel_full.pdf

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Workshop materials for **“Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel”**, presented at **DEF CON 34** and **BSidesLV 2026**.

This workshop explores custom malware development, EDR Architecture & Evasion, C2 customization, and kernel-level techniques using **Elastic Defend** as the target EDR.

# Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel

Workshop materials from **DEF CON 34** and **BSidesLV 2026**.

The materials cover topics including:

* EDR Architecture
* APC Injection
* Fiber
* Module Stomping
* Call Stack Spoofing
* Indirect Syscalls
* C2 Customization with Havoc
* Kernel-Level Attacks

The workshop focuses on understanding **how EDR detects malicious behavior and how attackers can modify their techniques to evade detection**.

## Notes

The `Reference` directory contains Markdown versions of the workshop materials. These files are provided for **reference only** and have not been thoroughly reviewed or updated.

During the actual workshops, we used slide-based presentation materials.

The source code used in the workshops was shared with workshop participants. I may make the source code publicly available if there is sufficient interest.

## Disclaimer

The techniques and concepts presented in these materials are intended for **educational and security research purposes only**.

Please do not use these techniques for malicious or unauthorized activities.

We hope these materials help you better understand EDR detection and evasion techniques and, ultimately, **improve your security and build stronger defenses**.

edrEvasionWorkshop

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

edrEvasionWorkshop

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Download README