İremDamar·Dec 23, 2025LOLBAS Alert’leri: Ne Zaman Müdahale Gerekir?Bir SOC analisti olarak PowerShell, rundll32 ya da certutil içeren bir alert gördüğümüzde refleksimiz çoğu zaman aynıdır: “Bu kesin…
R3dLevy·Nov 4, 2025Evading Windows Security: A List of AppLocker Bypass Techniques with LOLBAS🔐 Introduction
Yaniv·Sep 18, 2025Lolbasline: Baseline Windows Systems For Living Off The Land BinariesTL;DR: Lolbasline is a powershell module that parses lolbas yaml definitions, checks for binary presence on windows, and attempts…
Yaniv·Aug 30, 2025Mapping malicious file extensions: practical observations and controlsTL;DR: The list catalogs file extensions attackers commonly use for executable delivery, scripting, and archive-based payloads; use it as a…
