How to Bypass Anti-Virus to Run Mimikatz

Summary

This article provides a technical guide on how to bypass antivirus (AV) detection to execute Mimikatz, a credential-dumping tool. The author details their experience encountering AV detection with the PowerShell script "Invoke-Mimikatz" from PowerSploit and outlines methods to circumvent these security measures.

IFF Assessment

FOE

This article details techniques for evading security defenses like antivirus, which aids attackers in their operations.

Defender Context

This content is highly relevant for defenders as it exposes methods used to bypass common security controls, specifically antivirus software. Understanding these evasion tactics is crucial for improving detection capabilities, refining endpoint security policies, and developing more robust defense strategies against credential harvesting tools like Mimikatz.

Read Full Story →