Evasión de Defensas y Post-Explotación

Defence Evasion

• Post-Exploitation Behaviours & Memory Indicators

• Memory Permissions & Cleanup

• BOF Memory Allocations

• Fork and Run Memory Allocations

• SpawnTo

• Process Inject Kit

• PPID Spoofing

• Command Line Argument Spoofing

• SMB Named Pipes Names

• Event Tracing for Windows

• Inline (.NET) Execution

• Tool Signatures