Pinned Loading

1. No-Pseudocode No-Pseudocode Public

   Three techniques to prevent Ida Pro from decompiling your code

   C 2

2. Blinding-The-Falcon Blinding-The-Falcon Public

   How CrowdStrike Falcon detects ETW tampering, where its tripwire ends, and a PoC that blinds ETW without ever touching what it watches

   C