Defensive Telemetry

LdrShuffle: Stealthy Code Execution via DLL EntryPoint Overwriting EntryPoint Hijacking

EntryPoint Hijacking

LdrShuffle: Stealthy Code Execution via DLL EntryPoint Overwriting

ddos November 23, 2025

LdrShuffle Stealthy code execution via modification of the EntryPoint of loaded modules at runtime. Summary Windows processses have various...

BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking BitlockMove Lateral Movement

BitlockMove Lateral Movement

BitlockMove: New PoC for Covert Lateral Movement via BitLocker DCOM Hijacking

ddos November 21, 2025

BitlockMove Lateral Movement via Bitlocker DCOM & COM Hijacking. This Proof of Concept (PoC) for Lateral Movement...