Lightlines
By yaklang

windows-av-evasion

yaklang3.2k installs

A guide to running Windows tools past antivirus.

What it does

Guides Windows payload work with a decision tree for choosing antivirus and endpoint-detection evasion techniques.

When to use it

Use when working on Windows techniques for bypassing scanning, telemetry, assembly detection, API hooks, or signature detection.

How to use it

It changes how the agent develops Windows payload code and selects evasion techniques according to the detection encountered.

What you provide

  • An existing project

Latest review

What you need · 1

The techniques target Windows endpoints.


Access · 0

No additional actions listed.