Analyzing the doublepulsar kernel dll injection technique

[whoknows]

NSA-leaking Shadow Brokers just dumped its most damaging release yet (15/April)

https://arstechnica.com/security/2017/04/nsa-leaking-shadow-brokers-just-dumped-its-most-damaging-release-yet/

 

Analyzing the doublepulsar kernel dll injection technique

https://countercept.com/our-thinking/analyzing-the-doublepulsar-kernel-dll-injection-technique/

 

DoublePulsar Initial SMB Backdoor Ring 0 Shellcode Analysis

https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html

Edited April 22, 2017 by whoknows