Rare find

mimikatz-detector-condrv. The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from the ConDrv. ConDrv is a device created by condrv.sys, which handles the traffic between the Console Application (cmd/powershell/etc) and the actual console (conhost.exe).

github.com/nccgroup/mimikatz-detector-condrv

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.