imp hash·Mar 27The Geometry of a Hack: The Geometric Weaponisation of Language ModelsWhen I dug into the latest research on attacking Large Language Models, I was genuinely stunned. Forget clever words-attackers are now…
imp hash·Feb 23The Double Agent(Dhurandhar): A Red Team Exercise in AI Supply Chain CompromiseHow we battled Secret Masking, Lazy Agents, and Safety Guardrails to trick an AI into stealing production secrets.
imp hash·Dec 30, 2021Shooting Up: On-Prem to Cloud — Detecting “AADConnect” Creds DumpAssumption: It is assumed that the attacker has got hold of the local admin account on the domain controller (dc) where AAD Connect is…
imp hash·Nov 2, 2020UserAssist — with a pinch of Salt — As an “Evidence of Execution”Lately, I have been experimenting with UserAssist keys on my Windows 10 machine with an OS build 18362. I have seen some interesting…A response icon2A response icon2
imp hash·Sep 13, 2020Windows Process Internals: A few Concepts to know before jumping on Memory Forensics [Part 5] — A…In this series of articles of “Must know Process Internals for Memory Forensics” — we have traversed through ActiveProcessLinks…A response icon2A response icon2
imp hash·Sep 1, 2020Windows Process Internals: A few Concepts to know before jumping on Memory Forensics [Part 4] —…What is Virtual Address Descriptor (VAD)?
imp hash·Aug 29, 2020Windows Process Internals: A few Concepts to know before jumping on Memory Forensics [Part 3] —…This is the Part-3 of the series of article “Windows Process Internals: A few Concepts to know before jumping on Memory Forensics”.
imp hash·Aug 25, 2020Windows Process Internals: A few Concepts to know before jumping on Memory Forensics [Part 2] —…Ldrmodules is one of the trusted plugins of Volatility suit to detect a dll-hiding or injection kind of activities in a process memory. I…