
SANS Stormcast Thursday, September 18th, 2025: DLL Hooking; Entra ID Actor Tokens; Watchguard and NVidia Patches
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
00:00
DLL Reload Technique Evades Breakpoints
Discussion of Xavier's CTRL-Z DLL hooking technique where malware reloads DLLs from disk to overwrite analyst breakpoints and thwart dynamic analysis; example Python-based prototype ransomware shown.
Transcript
Play full episode