Windows Internals Courses
Cooper via YouTube Windows Agentless C2 - Abusing the MDM Client Stack
Ekoparty Security Conference via YouTube Windows Internals
Pluralsight New Process Injection Techniques Using Windows Thread Pools
Black Hat via YouTube Walking the PEB, Enhancing IDA's Output with Structures, and Unlocking Runtime-Linking - Lecture 4
Dr Josh Stroschein via YouTube Lockbit's DLL Name Seeding Technique for API Hashing - Part 5
Dr Josh Stroschein via YouTube Building a Canarytoken to Monitor Windows Process Execution - Track 2
HackMiami via YouTube Practical Exploitation of Registry Vulnerabilities in the Windows Kernel
OffensiveCon via YouTube Finding Functions from Export Directory and Using Seeds for API Checksums - Part 6
Dr Josh Stroschein via YouTube