Back to remco.schoeman's feed

EDRChoker: Choking The Telemetry Stream to Bypass Defenses (opens in new tab) 聽馃摗MQTT 聽Content type: Blog

zerosalarium.com路路r/netsec路Covered by thehackernews.com + 1 more路Open original (opens in new tab)

EDRChoker redteam tool uses Policy-based QoS - pacer.sys to set throttling on EDR agents, causing them to always time out, effectively blocking them

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Cited by 2 articles

ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories

thehackernews.com路

Risky Bulletin: In the age of AI, CISA changes federal patching rules

news.risky.biz路

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help