GhostTree & GhostBranch: Abusing Recursive NTFS Junctions to Defeat EDR Folder Scans
Summary
With two commands and no admin rights, an ordinary user can generate a near-infinite number of valid Windows file paths — enough to make recursive scanners, EDR included, run forever without f
blog.fiscybersec.com5 min read