Dent: creating COM-based bypasses utilizing vulnerabilities in Microsoft’s WDAPT sensors

Dent This framework generates code to exploit vulnerabilities in Microsoft Defender Advanced Threat Protection’s Attack Surface Reduction (ASR) rules to execute shellcode without being detected or prevented. ASR was designed to be the first...