- Detecting evasive syscalls from user mode https://winternl.com/detecting-manual-syscalls-from-user-mode/ 9 comments netsec
- Static Detection of Portable Executable Files https://winternl.com/static-detection-of-portable-executable-files/ 3 comments netsec
- Introduction to Win32 Shellcode Using Visual Studio's Compiler http://winternl.com/2016/05/02/hello-world/ 29 comments netsec