ISOLATION FRAMEWORK

Summary from the TLDR InfoSec newsletter

The blog post covers the basics of Windows containers, breaks down its file system isolation framework, reverse-engineers its main mini-filter driver, and details how it can be utilized and manipulated by a bad actor to bypass EDR products in multiple domains.