A tool for simulating AV/EDR behavior. The utility allows you to hone your skills in bypassing security measures when creating your own boot loaders.
1. Compile the project ./compile.sh
2. Create a file ioc.json with shellcode patterns
3. Launch the tool, specify the identifier of the malicious process: .\CrimsonEDRPanel.exe -d C:\Temp\CrimsonEDR.dll -p 1234
Enjoy!
1. Compile the project ./compile.sh
2. Create a file ioc.json with shellcode patterns
3. Launch the tool, specify the identifier of the malicious process: .\CrimsonEDRPanel.exe -d C:\Temp\CrimsonEDR.dll -p 1234
Enjoy!