Detecting AV and EDR Evasion

About this course

You should already understand core Windows internals: processes, threads, DLLs, and how a Windows service or scheduled task launches a program, plus basic familiarity with an EDR or antivirus console and with Sysmon or native Windows event logs. You do not need reverse engineering experience or malware development background. This course reads telemetry an attacker's evasion attempt leaves behind; it does not...

Unlock it with 90 HFC, or get every paid lab and course with HackFury Pro.

Skills you practice

Difficulty: Advanced

• Endpoint Security
• Malware Analysis
• DFIR
• Defensive security

What the course covers

1. Prerequisites
2. Purpose
3. Concept Map
4. Abbreviations
5. Terminology
6. Core Lessons
7. Danger Zone
8. Real World
9. Scope
10. Readiness Checklist
11. FAQ
12. Key Takeaways
13. Summary