Was neues um an EDR vorbeizukommen – ScareCrow

Posted on February 3, 2021February 6, 2021 by Severin Winkler

ScareCrow is a payload creation framework for generating loaders for the use of side loading (not injection) into a legitimate Windows process (bypassing Application Whitelisting controls).

https://github.com/optiv/ScareCrow