BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.securitybsides.org.uk//bsides-london-2024//speaker/
 /WGSLQR
BEGIN:VTIMEZONE
TZID:Europe/London
BEGIN:STANDARD
DTSTART:20231215T000000
TZNAME:GMT
TZOFFSETFROM:+0000
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20240331T020000
RDATE:20250330T020000
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T020000
RDATE:20251026T020000
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:When the Hunter Becomes the Hunted: Using Minifilters to Disable E
 DRs - Tom Philippe
DTSTART;TZID=Europe/London:20241214T144500
DTEND;TZID=Europe/London:20241214T153000
DTSTAMP:20260916T102157Z
UID:pretalx-bsides-london-2024-V8QCKM@cfp.securitybsides.org.uk
DESCRIPTION:This presentation explores the advanced use of minifilters in 
 offensive security operations\, focusing on their application in bypassing
  and disabling EDRs. We will delve into the architecture of EDR systems an
 d common offensive uses of mini filters\, such as bypassing file system mo
 nitoring.\n\nWe will then introduce a novel technique to entirely disable 
 EDRs via the abuse of minifilters.\n\nThe talk will also cover the implica
 tions for defensive security and potential countermeasures\, aiming to pro
 vide valuable insights for both offensive and defensive security professio
 nals.
LOCATION:Track 3
URL:https://cfp.securitybsides.org.uk/bsides-london-2024/talk/V8QCKM/
END:VEVENT
END:VCALENDAR