varonis.com

GhostTree: Unveiling Path Manipulation Techniques to Bypass Windows Security (opens in new tab)

Covered by 3 sources See all sources covering this story including thehackernews.com, vulnu.comDiscussed on Hacker News and r/netsec

Varonis Threat Labs discovered a new technique that abuses NTFS junctions to generate infinite file paths, causing EDR products to hang and leave files unscanned.

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 3 articles

thehackernews.com·

ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More

Feeds
vulnu.com·

#169

Feeds
news.risky.biz·

Risky Bulletin: Microsoft takes down MSaaS used by ransomware gangs

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help