Hidden desktops are a legitimate Windows capability, often used by specialized software, and occasionally used by malware.

Windscribe VPN creates an experimental computer script that removes the mysterious Global Device ID (GDID) from a Windows PC, ...

I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research. TL;DR: Windows includes a file-system ...

Every Sysmon deployment can be deceived, and Sysmon is now built into Windows 11 and Windows Server 2025 (though not enabled by default). The assumptions for this research mirror BYOVD attacks: the ...

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...