Injecting a Cobalt Strike beacon from an Office macro under Windows Defender
Injecting a Cobalt Strike beacon from an Office macro under Windows Defender
Injecting a Cobalt Strike beacon from an Office macro under Windows Defender
In this blogpost I will detail a technique to inject a payload into a remote process from an Office macro, without being detected by Windows Defender.
In this blogpost I will detail a technique to inject a payload into a remote process from an Office macro, without being detected by Windows Defender.
Injecting a Cobalt Strike beacon under Defender