Topics

• EDR evasion
  • Tip 1 - Make your malware look “normally random”
  • Tip 2 - Cure the Import Address Table with Dynamic API Resolution
  • Tip 3 - Hide the APIs used for the dynamic API resolution themselves from the IAT