Matt Graeber·Jan 31, 2018The EMET Attack Surface Reduction Replacement in Windows 10 RS3: The Good, the Bad, and the UglyIntroduction
Matt Graeber·Nov 27, 2017Adventures in Extremely Strict Device Guard Policy Configuration Part 1 — Device DriversNote: The Device Guard policy I created as a result of this post can be found here.A response icon2A response icon2
InPosts By SpecterOps Team MembersbyMatt Nelson·Nov 6, 2017A Look at CVE-2017–8715: Bypassing CVE-2017–0218 using PowerShell Module ManifestsRecently, Matt Graeber (@mattifestation) and I have been digging into methods to bypass User Mode Code Integrity (UMCI) in the context of…
InPosts By SpecterOps Team MembersbyMatt Nelson·Oct 19, 2017UMCI Bypass Using PSWorkFlowUtility: CVE-2017–0215When looking for User Mode Code Integrity (UMCI) bypasses in the context of Device Guard, my typical approach has been to hunt for…
InPosts By SpecterOps Team MembersbyMatt Nelson·Aug 24, 2017UMCI vs Internet Explorer: Exploring CVE-2017–8625In the recent months, I have spent some time digging into Device Guard and how User Mode Code Integrity (UMCI) is implemented. If you…A response icon1A response icon1
