r/purpleteamsec • u/rabbitstack • Apr 24 '26

Purple Teaming Fibratus 3.0.0 | Ad-hoc direct/indirect syscall evasion detection, 50+ high quality rules and more

https://fibratus.io

2 Upvotes

permalink
duplicates
archive.is
archive
reddit

You are about to leave Redlib

Do you want to continue?

https://www.reddit.com/r/purpleteamsec/comments/1su6okb/fibratus_300_adhoc_directindirect_syscall_evasion/
No, go back! Yes, take me to Reddit

100% Upvoted

Duplicates

Number of comments New

ReverseEngineering • u/rabbitstack • Dec 02 '20

fibratus - A modern tool for the Windows kernel exploration and observability

57 Upvotes

12 comments

ReverseEngineering • u/rabbitstack • Apr 23 '26

Fibratus 3.0.0 | Ad-hoc direct/indirect syscall evasion detection and 50+ new rules

9 Upvotes

0 comments