Tagged articles

LOLBin

2 articles · Page 1 of 1

Jun 13, 2026 · Information Security

How WinLOLBIN‑GT’s Massive LOLBin Dataset Boosts Blue‑Team Detection

The newly released WinLOLBIN‑GT dataset, containing over 10 million labeled Windows LOLBin behavior events, enables machine‑learning models—such as a Char CNN achieving 99% accuracy—to dramatically improve blue‑team detection, reduce false positives, and support SOC, EDR, and threat‑hunting workflows.

Blue teamInformation SecurityLOLBin

0 likes · 8 min read

How WinLOLBIN‑GT’s Massive LOLBin Dataset Boosts Blue‑Team Detection

Black & White Path

May 10, 2026 · Information Security

Bypassing Traditional WMIExec Detection with a File‑less WMI Lateral Movement Technique

The article dissects a stealthy, file‑less WMI lateral movement method that avoids the obvious Win32_Process.Create signature by hijacking stopped LocalSystem services, leveraging the LOLBIN ScriptRunner.exe to execute remote SMB scripts, automatically restoring the service and leaving minimal forensic traces.

Detection EvasionFileless AttackLOLBin

0 likes · 7 min read

Bypassing Traditional WMIExec Detection with a File‑less WMI Lateral Movement Technique