
EDRSilencer
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
adversarial-attackids-ips-evasionpost-exploitation+1
1.9k

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

OSINT tool researched and designed to hunt down IG handles