Entries tagged - "false-positive"
- Five Ghosts in Ring Zero - Autopsies of Windows Kernel Exploits That Vanished Under Proof
- Refuting a condrv Kernel Read - Chasing a COMPLETE_IO memmove Through the Console IPC and a Self-Verifying PoC, Only to Lose to One Decompiler-Hidden ProbeForRead on Windows 11 24H2
- The Sandbox Broker That Couldn't Be Confused - Forging an AppContainer Token to Reach bfs.sys and Failing to Path-Confuse a File Broker That Re-Runs the Access Check in the Caller's Own Context on Windows 11 24H2