
CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation
Educational demo of CVE-2020-1472 (ZeroLogon) detection using Windows Event Logs and Suricata IDS, plus mitigation via Windows Updates. Includes…
educationids-ips-evasionintrusion-detection+3

Educational demo of CVE-2020-1472 (ZeroLogon) detection using Windows Event Logs and Suricata IDS, plus mitigation via Windows Updates. Includes…

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

Windows x64 kernel mode rootkit process hollowing POC.

A slightly more fun way to disable windows defender + firewall. (through the WSC api)