PhantomBuffer: Effective EDR Evasion Through Stealth Injectionhttps://www.reddit.com/r/netsec/comments/1x8rwjz/phantombuffer_effective_edr_evasion_through
PhantomBuffer EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response). Unlike traditional edr bypass techniques, it does not use the VirtualAllocEx and WriteProcessMemory APIs . submitted by /u/Cold-Dinosaur [link] [comments]