4 ms·
The time where AV business was just catching signatures, is long gone. ANYTHING that touches lsass.exe, no matter how, will trigger AV these days. Go and try
by icare_1er 5y ago
The time where AV business was just catching signatures, is long gone.
ANYTHING that touches lsass.exe, no matter how, will trigger AV these days.
Go and try to compile your own customized version of Mimikatz, unless you are malware developer, you will not manage to get one that doesn't get flagged.
- staticassertion 5y agoI'm aware of the fact that AVs are not just hashing binaries or whatever. I'm well aware of how AV works in general. My points all stand imo. AV is a reactive technology.