GhostTree & GhostBranch: Abusing Recursive NTFS Junctions to Defeat EDR Folder Scans
Summary With two commands and no admin rights, an ordinary user can generate a near-infinite number of valid Windows file paths — enough to make recursive scanners, EDR included, run forever without f
Jul 7, 20265 min read2
