Add: RedCursorSecurityConsulting/PPLKiller to Defense Evasion section

This commit is contained in:
pe3zx 2021-04-05 11:15:11 +07:00
parent c287e31d24
commit d73c670f22

View File

@ -754,6 +754,10 @@ Some tools can be categorized in more than one category. But because the current
drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and
logging tools.</td>
</tr>
<tr>
<td><a href="https://github.com/RedCursorSecurityConsulting/PPLKiller">RedCursorSecurityConsulting/PPLKiller</a></td>
<td>Tool to bypass LSA Protection (aka Protected Process Light)</td>
</tr>
<tr>
<td><a href="https://github.com/secretsquirrel/SigThief">secretsquirrel/SigThief</a></td>
<td>Stealing Signatures and Making One Invalid Signature at a Time</td>