Search results

Unable to obtain a handle to vulnerable driver. exiting...

Status: Open.

#32 In wavestone-cdt/EDRSandblast;

· tonzking123 opened on Oct 14, 2024

UNHOOK_WITH_INHOUSE_NTPROTECTVIRTUALMEMORY_TRAMPOLINE assumes patch starts at function start

Status: Open.

#29 In wavestone-cdt/EDRSandblast;

· rafaelscheel opened on Jun 23, 2024

Wait for minidump exfiltration before re-enabling the EDR's capabilities

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#28 In wavestone-cdt/EDRSandblast;

· themaks opened on Jan 28, 2024

Implement userland ETW-Ti impairing

enhancementNew feature or requestNew feature or request

Status: Open.

#24 In wavestone-cdt/EDRSandblast;

· themaks opened on Dec 5, 2023

TODO: check if 24H2 edition of Windows breaks things in EDRSandblast and fix them if needed

bugSomething isn't workingSomething isn't working

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#23 In wavestone-cdt/EDRSandblast;

· themaks opened on Nov 28, 2023

Project needs to be recompiled if used with a different vulnerable driver

enhancementNew feature or requestNew feature or request

good first issueGood for newcomersGood for newcomers

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#18 In wavestone-cdt/EDRSandblast;

· themaks opened on Oct 24, 2023