SindriKit 1.3.0 introduces a significant upgrade to its syscall evasion pipeline by adding native call stack spoofing, a technique designed to reduce exposure to modern endpoint detection and response telemetry. The release builds on SindriKit 1.2.0, which separated syscall resolution from invocation and enabled indirect syscalls by jumping to legitimate syscall; ret sequences inside ntdll.dll. […]
The post SindriKit 1.3.0 Adds Dynamic Stack Spoofing to Evade EDR Telemetry appeared first on Cyber Security News.