Bypassing FileBlockExecutable in Sysmon 14.0: A Lesson In Analyzing Assumptions

https://www.huntandhackett.com/blog/bypassing-sysmon

https://x.com/home/status/1572868139679088642

https://x.com/home/status/1572872858183036928

https://x.com/home/status/1572887700772114433

https://x.com/home/status/1572890840418365440

https://x.com/home/status/1572925015628324868

https://x.com/home/status/1572946567186632704

https://x.com/home/status/1573019225953902593

https://x.com/home/status/1573068532266541058