• Member for 3 years, 2 months
  • Last seen more than 1 year ago
  • Denmark
Reverse engineering Windows Defender's signature for Metasploit Framework's metsrv.dll
5 votes

One approach you might consider involves compiling different versions of metsrv.dll from source and then observing which ones are detected and which ones are not. For instance: Comment out half the ...

View answer