sessionpool

security, kernel, debugging, hacking, research..

[Hari Pulapaka @TheRealHariP]

More details on all the updates we made for Hardware-enforced stack protection available on #IntelCET and AMD.

https://t.co/GZrSWxmJJc

[sessionpool @sessionpool]

Breaking VSM by Attacking SecureKernel https://t.co/AOISnewM82 via @YouTube

[Alex Ionescu @aionescu]

The slides and videos from my @USENIXSecurity WOOT 2020 talk are now posted: https://t.co/9qecrR1qqA

[Roberto Rodriguez 🇵🇪 @Cyb3rWard0g]

Capturing Network Packets from Windows endpoints leveraging built-in ETW mechanisms via Netsh ⚔️and Azure cloud native services via Azure Network Watcher extensions 🌩️ Documenting and extending the concepts behind @Mordor_Project PCAP files 😈

https://t.co/SqmgxeiXJS

[Saar Amar @AmarSaar]

Happy to share that @JosephBialek and I just published a new research paper that analyzes the effort of enabling SMAP for NTOS: https://t.co/wMWF9K4H4v

We'd love to discuss && hear other perspectives :)

[Andrea Allievi @aall86]

Finallly! My write-up on KDP is online! 🍾🍾

[Denis Bakhvalov @dendibakh]

It has been a long journey!

After almost a year of work the first draft of my book about performance analysis and tuning is ready.🎉

I know many people are struggling these days so I decided to make the book FREE.

I'm looking for people who would like to review the book.
(1/2)

[Open Source Security Inc. @opensrcsec]

A recording of today's presentation of "10 Years of Linux Security - A Report Card" is now available to view here: https://t.co/KrnJX54Hzw PDF: https://t.co/uPmUgTrgCh PPT: https://t.co/A7P0Q2phhP

[Yarden Shafir @yarden_shafir]

Video of my keynote in @OPCDE #6 is up and it has the coolest cover photo ever!
Had so much fun in my first virtual conference. Thank you @msuiche for organizing it and inviting me and thanks to anyone who watched!

[sessionpool @sessionpool]

vOPCDE #6 - WinDbg: time to put the @ back in the bag (Yarden Shafir) https://t.co/WIkkFrBl5S

[Satoshi Tanda @standa_t]

If you are curious about how DMA remapping (VT-d) can be configured to protect memory from DMA, here is a short introduction to it with sample code.
https://t.co/dSUeSkuiua

Code: https://t.co/dH1ZLqj2Ws

[Olaf Hartong @olafhartong]

#Sysmon 11 is out with a new Event type and several improvements!

I’ve published a blog post detailing all new features here: https://t.co/kHcnnX1Ue6

#DFIR #Sysinternals #ThreatHunting

[offensivecon @offensive_con]

Bored in isolation? Do not despair! #OffensiveCon20 videos are now up! https://t.co/JpPpX4oUoz

[Brandon Falk @gamozolabs]

Let's write a new bootloader for x86 in Rust https://t.co/mFzTft37N8

[Gil Dabah @_arkon]

Guys & girls!
Exactly a year ago I promised over 15 bugs in win32k.
You're welcome to read and find out about my biggest research so far: #win32k #SmashTheRef bug class - https://t.co/niPACKBBLd
Check out the paper and the POCs, there are some crazy stuff going on. Promise!

[sessionpool @sessionpool]

BlueHat IL 2020 - David Weston - Keeping Windows Secure https://t.co/NeO7fxEJls

[Narib @n4r1B]

First part of a research on Windows Defender main driver - WdFilter
https://t.co/RFzYBBonq7

[REcon @reconmtl]

Recon 2019 video have been released https://t.co/i9ZwA23qkO

[Hari Pulapaka @TheRealHariP]

we have an update to DTrace on Windows. with the latest 20H1 insider build, no more KD required to use dtrace on windows. plus arm64 MSI.

https://t.co/fSiEjBSLOz

[Sinaei @Intel80x86]

The 7th part of the tutorial Hypervisor From Scratch is published!

In this part, I described EPT.

Thanks to Petr @PetrBenes as Hypervisor From Scratch could never have existed without his help and to Alex @aionescu for patiently answering my questions.

https://t.co/KrjPU1G7q8