top of page


When VirtualAlloc Isn't VirtualAlloc
AI is lowering the bar on reverse engineering work. Endpoint Detection and Response (EDR) components are now squarely in the crosshairs of wayward hackers. And it turns out you can find these components online, left exposed by universities and IT departments, or fromaccess to a host where the software is installed. I fed these components into an AI-driven reverse engineering harness using Ghidra to determine their capabilities.
Mike S.
Sep 2811 min read
bottom of page