Invisible attacks with bind mount6 April 2026·2 minsAlexander GolovinBlueTeamA technique much simpler than rootkit can make a malicious process invisible
Disabling Windows Defender via symlink12 January 2026·2 minsAlexander GolovinBlueTeam Windows DefenderBuilt-in antivirus could be switched off without any third-party software