Cedric Halbronn Probably missed a few: github.com/igogo-x86/HexR… github.com/REhints/HexRay… github.com/sibears/HRAST github.com/ax330d/hrdev dougallj.wordpress.com/2018/06/04/wri… hexblog.com/?p=1248 hexblog.com/?p=1198 fireeye.com/blog/threat-re… github.com/CrowdStrike/Cr… msreverseengineering.com/blog/2018/10/9…

[BLOG] Romain Dumont takes us for a "Guided tour inside WinDefender's network inspection driver", showing us how Windows Defender uses the Windows Filtering Platform, along with some bugs he found on WdNisDrv.sys, and a tool to play with this driver. blog.quarkslab.com/guided-tour-in…

The video of the 2020 talk Black Hat about de-obfuscation with Dynamic Binary Instrumentation is here: youtube.com/watch?v=MRku-2… 📃 Slides, Whitepaper & demo: romainthomas.fr/publication/20…