Skip to content
Threat Feed
Subscribe

Vendor

Carbon Black

2 briefs RSS
high advisory

EDRSilencer Execution Detected

The EDRSilencer tool is designed to block outbound traffic of EDR processes by leveraging Windows Filtering Platform (WFP) APIs to evade endpoint defenses.

Microsoft Defender +2 edr defense-evasion windows
3r 1t
medium advisory

LSASS Loading Suspicious DLL

Detection of LSASS loading an unsigned or untrusted DLL, which can indicate credential access attempts by malicious actors targeting sensitive information stored in the LSASS process.

Windows credential-access lsass dll-injection
2r 2t 9i