奇安信攻防社区-【补天白帽黑客城市沙龙-西安站】深度解析EDR和用特定手法将它绕过

【补天白帽黑客城市沙龙-西安站】深度解析EDR和用特定手法将它绕过

演讲议题：深度解析EDR和用特定手法将它绕过

### Speaker：王朝

![幻灯片1.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-311ec772ecad5cca0aa116a2a562a034ae4250ce.png)

![幻灯片2.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-4688a7d4178d7eb17bfaf5e95804a4e49dcccd2a.png)

![幻灯片3.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-1be7f6f6c1a7408f1ddb98c9a99b2cd59faf2c3c.png)

![幻灯片4.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-0fa28d248c727de6445cd65830e7a0cee08e800f.png)

![幻灯片5.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-9d0db19f3cd377f88db912a945781c8a7db4f30a.png)

![幻灯片6.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-c7a2d33c483fa90187b76da74feaee5440a40648.png)

![幻灯片7.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-5a96a46d542d4129f8ac29aa11efdeb46de96cfb.png)

![幻灯片8.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-09461f94f5f2f97bb8b8532467e5478c2a38c3a9.png)

![幻灯片9.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-67fadb92c0a8c55a792d04499c23de3a5f7f09d8.png)

![幻灯片10.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-3b98fb5893e2be1e0b0f45eb3abf8e8d8d187672.png)

![幻灯片11.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-ea774135e48ad57db35e83918ec51de4ce4d5291.png)

![幻灯片12.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-99c33c6b80780bbb4e840feae1268a9aee3ab02a.png)

![幻灯片13.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-c2794a5f6d3ace87ce7f41af02a8d83d4debb077.png)

![幻灯片14.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-166dc7f3cb3bc55a29e5cac4ec85eb000b312707.png)

![幻灯片15.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-5a6ddcb031ad96bed0292ae83a9fc61b05881362.png)

![幻灯片16.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-3978e8a9a50e2c5e8bd7c27e3d53cc31a752156e.png)

![幻灯片17.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-fca091f9c5f43814b41afbfbc43a7aaaccbbe313.png)

![幻灯片18.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-bb6bc6dfa2a6e1998107250ab8e9026ed5c8ced2.png)

![幻灯片19.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-cad6239c0fcc43433f2bc0adc474b5be1794cc05.png)

![幻灯片20.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-300d61eb4f8b41bacdf6e1d77a462c88858609cf.png)

![幻灯片21.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-8a1dcb42d0b640d04ba64ad415a36fbdae944e40.png)

![幻灯片22.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-0a8d4327f604eec921fa7153895a11ea255ed010.png)

![幻灯片23.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-b33af13e9367c9966e1408adb31908b45424a426.png)

![幻灯片24.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-4d1fa93c4461671ae12f95dcc97b4a2bd3f5bf75.png)

![幻灯片25.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-cf7d6a8d5a40be9763a3a0c666ac3df39f206260.png)

![幻灯片26.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-a120e4b802f1beb131968d6e4b1f3f3e5d99da08.png)

![幻灯片27.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-ad4b9d1bdb85ce1c3457e1161d8bde3e4d956b9a.png)

![幻灯片28.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-da073f09cab4e8d9f296df34b427e3eb0fbee99c.png)

![幻灯片29.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-2f0375feb12193683daf78eb62c186239c17df69.png)

![幻灯片30.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-5092fc085778a213d731f1b736b9804f1bcc006e.png)

![幻灯片31.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-67a95bd1399d44c92c134632a30a1f7e3cb3c6af.png)

![幻灯片32.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-6574b827ee332e30ed624555bcaaa66f8a026e4c.png)

![幻灯片33.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-6f6b89823b034ec11cb1496a1c9211fdbd2b6c29.png)

![幻灯片34.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-60564d729fa4f9ba9d33c2f9cc98849956aa73df.png)

![幻灯片35.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-8f4c852e4f4878af78832c3322101ed0cc6161f9.png)

![幻灯片36.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-112046befabe0e51ea9b86a0dac47c611f46a5fe.png)

![幻灯片37.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-eb9d05e3690745f314f652709ed44eb7ab42704a.png)

![幻灯片38.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-baa95eb979d3210f368b72ddf2dc57c269391324.png)

![幻灯片39.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-ec5dda547e206b0acb0aa97f23f636525b416a87.png)

![幻灯片40.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-47941188b2e21cde87f4267ad121353ac0e7c9f1.png)

![幻灯片41.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-3fab73d2db6533f7679eb781356a72916ebf6814.png)

![幻灯片42.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-70139545042a6e1de49531007716d34b1205a00f.png)

![幻灯片43.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-c39139d43a3d4199d6457eaae9fd5ab078492b30.png)

![幻灯片44.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-2eddfa5bdc8f320624aae11b7baeb5bb0e22786d.png)

![幻灯片45.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-31faff3172bb506ef1977f4b9a95e54db8392535.png)

![幻灯片46.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-a0406659e6185090ac6b9cea0dabfd0791608b4d.png)

![幻灯片47.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-c9e5fc37a0ec1a7b0df2ea51b1a7941e311720aa.png)

![幻灯片48.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-446ccc7427fee2b28db113723b2779a34948b461.png)

![幻灯片49.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-39bd8b9f7d3f1193cd94e78ecb012a2fe8639d66.png)

![幻灯片50.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-78124f1ca7fb5b17bf4c56127b2326cc2a6dafa5.png)

![幻灯片51.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-dc6e93030f46637b26b0ecdbe4609d8cc2523cb2.png)

![幻灯片52.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-b893d1838dd6adc6ebb2d9d2f912f760b9c8e147.png)

![幻灯片53.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-599054bf501489d5d65d484fe5b277d7134559b5.png)

![幻灯片54.PNG](https://shs3.b.qianxin.com/attack_forum/2025/04/attach-6bb002f444e1ff5f32110b5d41314858a82e1bf6.png)

发表于 2025-04-01 15:46:17
阅读 ( 370 )
分类：其他

【补天白帽黑客城市沙龙-西安站】深度解析EDR和用特定手法将它绕过

0 条评论