Marc S.’s Post

“Poolparty” is one of SafeBreach projects, which consists of a set of fully-undetectable process injection techniques abusing Windows Thread Pools. It exploits some design flaws and undocumented features of Windows Thread Pools to inject code into any process without triggering any alerts from leading endpoint detection and response (EDR) solutions. Poolparty has eight variants, each using a different type of thread pool work item to execute the injected code.

Many windows in Understand have a 'sync' checkbox on their top bar. With this option enabled, your selections as you traverse the editor and other windows will update and replace the contents in the synced window. When 'sync' is deselected, you gain the ability to open multiple windows of the same type for side-by-side comparison. Check out the video below for a quick demonstration! https://lnkd.in/gC2eAfmN

Major updates to the Windows To Go Creation Tool! 1. Added automatic image type detection for ESD, SWM and WIM images. 2. Added support for Windows images that contain both 32-bit and 64-bit images in the same image. 3. Fixed critical bugs. https://lnkd.in/gsV33nUu

HAP BİLGİ Windows Power Shell ile zaman damgalı PING atmak ( komut kopyalarken hatalı olmuş) filter timestamp {“$(Get-Date -Format o): $_”} & ping www.google.com -t | timestamp >c:\ping\ping.txt Get-Content c:\ping\ping.txt –wait

There's a growing narrative that RAG will become obsolete due to long context windows, but I strongly disagree. Here’s why: - Metadata filtering (like dates and view counts) is essential in many practical applications. - The "R" in RAG is increasingly agentic, making critical decisions about source selection and data aggregation. - Longer context windows don't negate the benefits of filtering out irrelevant documents for better results. RAG is here to stay because even if we can stuff the entire context with 10 million tokens, the LLM will always find the answer more efficiently if you can narrow the input.

Nuke It From Orbit: Unelevated user to MS Defender removal on local physical device - with or without BitLocker. The tool leverages the 'defragmentation' API which allows it to map where on disk files are located, writes a bash script for you, and then you can boot to Linux on the device or somewhere else with the harddrive connected. It takes out the executables, but not the kernel drivers, as that results in a BSOD (repair boot loop in reality). But works fine for me here. WARNING: Destructive tool! Even though there's a backup done, so you theoretically could restore everything back, don't count on it. Maybe nifty if you're doing pentests :-) https://lnkd.in/eHwWUfbK

Not so much threat research related... But, if you're like me and you "Dark Mode all the things" and are annoyed by the unchangeable light theme in lab/ trial versions of Windows, I have a new script for ya: This script allows you to switch between light and dark themes and accepts either -light or -dark as an argument, then adjusts the Windows theme by setting the appropriate registry values, which bypasses the activation enforcement for stylistic changes. https://lnkd.in/g5ANqPvK

EinhugurViewManager was inspired by the very popular RubberViews toolkit for Xojo. Get fluent scaling of your Windows and ContainerControls. Learn more on the Xojo Forums https://bit.ly/3RarX8M

Here's a cool project: A quick example of how one can "synchronize" a 3D scene across multiple windows using three.js and localStorage. This project is open-sourced under the MIT License. I will share the source code in the comments :)

Still writing console logs? Me too! I've found this VS Code extension to write a structured log message with a shortcut. It saves a few seconds here and there but that adds up over time. If you are like me, you write print statements almost every single day. By using a shortcut you can simplify it and stay in flow. What I like about it... Messages are structured: 🚀 Visual Identifier 📄 File and line 📦 Variable 🔍 Value They are also customizable. You can choose what to include in each message. Steps: 1. Select or hover over the variable for debugging. 2. Shortcut: ctrl + alt + L (Windows) or ctrl + option + L (Mac). ⭐ Bonus: supports multiple cursor selection. TLDR: Turbo Console Log is a VS Code extension that creates console log messages with a shortcut. #DevTools #Debugging #VSCode #SoftwareDevelopment #CodeQuality