CarbonMonoxide
May 15, 2020 ยท View on GitHub
EDR Evasion - Combination of SwampThing - TikiTorch
Work in progess.
Essentially combining these elements:
1. PPID Spoofing
2. CmdLine Spoofing
3. QAPC Injection
4. TikiTorch (Cobalt Strike Agressor Script)