logo
Red tradecraft
Plausible notes
  • Privacy greenhouse
  • Defence blues
  • Purple crossroads
  • Indigo observatory
  • Contact
Initializing search
    • An adversary mind map, one of many
      • Footing
      • What is there
      • Findings
      • Mapping
      • Turning access into position
        • Distinguishing interaction from capability
        • Spending capabilities for lateral movement
        • Operational reach and positional value
        • Getting past the login page
        • What honours what
        • Getting the lid off
        • Getting something of one’s own to run
        • Overflowing the bin on purpose
        • Crypto-attacks
        • Reverse engineering
        • Slipping through the cracks
          • Plausible notes
            • Trends in evasion
            • Living off the land
            • Fileless and memory-resident execution
            • Bring your own vulnerable driver
            • Packers
            • EDR evasion by design
            • AI-assisted polymorphism
            • Sandbox evasion
            • The low-noise intrusion model
          • Plausible notes
            • Trends in evasion
            • Living off the land
            • Fileless and memory-resident execution
            • Bring your own vulnerable driver
            • Packers
            • EDR evasion by design
            • AI-assisted polymorphism
            • Sandbox evasion
            • The low-noise intrusion model
          • Runbooks
          • Playbooks
        • The art of becoming part of the furniture
      • What changed, and what it cost
      • Revising, then pricing
      • Converting position into value
      • Assessing, then deciding
    • The grounds
    • Ankh-Morpork: the city leaves a footprint
    • Fungolia earthworks
    • Unseen University Power & Light Co.
    • The Scarlet Semaphore
    • TryHackMe rooms
    • Root-Me challenges
    • RIPE NCC Academy labs

    Plausible notes¶

    Evasion techniques and the shift to plausibility.

    • Trends in evasion
    • Living off the land
    • Fileless and memory-resident execution
    • Bring your own vulnerable driver
    • Packers
    • EDR evasion by design
    • AI-assisted polymorphism
    • Sandbox evasion
    • The low-noise intrusion model
    2026-07-30 17:57
    © Copyright 2025, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love by Ty Myrddin, 2026, with a forest garden fostered by /ut7