Infiltr8: Red-Book

Infiltr8: Red-Book

Defense Evasion

Endpoint Detection Respons (EDR) Bypass

Bring Your Own Vulnerable Driver (BYOVD)Safe Mode With Networking Windows Defender Application Control (WDAC): Killing EDR Load Unsigned Drivers Minifilter Altitude Hypervisor Code Integrity (HVCI) Disallowed Images Windows Filtering Platform (WFP)Userland Hooking Bypass

Living Off The Land

Signature Evasion

AppLocker Bypass Mark-of-the-Web (MotW) Bypass PowerShell Constrained Language Mode (CLM) Bypass Kill Windows Defender

Virtualization-based security (VBS) Bypass

Sandbox Evasion

Privilege Escalation

Credential Access

Lateral Movement

Red-TeamingDefense Evasion Endpoint Detection Respons (EDR) Bypass

Work in progress

This page is incomplete — content may be missing or unverified.

Hypervisor Code Integrity (HVCI) Disallowed Images

https://valhalla.nextron-systems.com/info/sigma-rule/cf68c9d6-4cd8-40e1-8d96-adb6092bf5de
https://x.com/yarden_shafir/status/1822667605175324787

Minifilter Altitude

Previous Page

Windows Filtering Platform (WFP)

Next Page