The EDR/AV Bypass Index

A vendor-neutral, normalized, cited record of publicly-reported endpoint-security bypass techniques — each linked to its original source.

384
confirmed bypasses
112
vendors / products
22
techniques
384
cited to source

Latest entries

Most recently disclosed bypasses on record.
TechniqueProductConfidenceDisclosedSource
Masquerading Apple high 2026-07-26 windowsforum.com record →
Masquerading Cursor high 2026-07-26 latesthackingnews.com record →
Disable or Modify Tools Microsoft high 2026-07-02 cybersecuritynews.com record →
Disable or Modify Tools Sysinternals high 2026-07-02 cybersecuritynews.com record →
Av Bypass Microsoft high 2026-07-02 www.techspot.com record →
Disable or Modify Tools CrowdStrike high 2026-06-25 www.rescana.com record →
Disable or Modify Tools Kandji high 2026-06-25 www.rescana.com record →
Exploitation for Priv-Esc Palo Alto Networks high 2026-06-01 cyberscoop.com record →
Exploitation for Priv-Esc Elastic high 2026-05-28 nvd.nist.gov record →
Code-Signing Abuse Microsoft high 2026-05-23 www.positioniseverything.net record →
Exploitation for Priv-Esc Atlassian high 2026-05-22 Microsoft Threat Intel record →
Exploitation for Priv-Esc F5 high 2026-05-22 Microsoft Threat Intel record →
Exploitation for Priv-Esc Microsoft medium 2026-05-22 Microsoft Threat Intel record →
Exploitation for Priv-Esc Google high 2026-05-22 hackaday.com record →
Disable or Modify Tools Microsoft high 2026-05-21 Huntress record →
AMSI Bypass Microsoft high 2026-05-21 www.tiraniddo.dev record →
Code-Signing Abuse Microsoft high 2026-05-20 cybersecuritynews.com record →
ETW Tampering Microsoft medium 2026-05-19 medium.com record →
Exploitation for Priv-Esc Microsoft high 2026-05-18 thehackernews.com record →
Exploitation for Priv-Esc Microsoft high 2026-05-18 www.csoonline.com record →
Masquerading Apple high 2026-05-18 www.sentinelone.com record →
AMSI Bypass Microsoft high 2026-05-16 infosecwriteups.com record →
Exploitation for Priv-Esc Rapid7 high 2026-05-15 nvd.nist.gov record →
DLL Side-Loading SentinelOne high 2026-05-14 cybersecuritynews.com record →