From 42484ee102ea8713fa1bc1f7c2901aeabe1e3caa Mon Sep 17 00:00:00 2001 From: pe3zx Date: Sun, 21 Feb 2021 21:23:14 +0700 Subject: [PATCH] Add: karttoon/trigen to Defense Evasion section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 1c3a9ea..c72b02f 100644 --- a/Offensive.md +++ b/Offensive.md @@ -658,6 +658,10 @@ Some tools can be categorized in more than one category. But because the current jthuraisamy/TelemetrySourcerer Enumerate and disable common sources of telemetry used by AV/EDR. + + karttoon/trigen + Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode. + matterpreter/DefenderCheck Identifies the bytes that Microsoft Defender flags on.