windows-containers

Main Stage·37 min

• DEF CON
• Malware
• Date: Aug 2023
• Location: Las Vegas

Daniel Avinoam

Daniel Avinoam reverse engineers the Windows Containers minifilter driver, weaponizing native filesystem isolation to hide malicious files and evade EDR sensors.

Main Stage·39 min

• DEF CON
• Cloud
• Date: Aug 2022
• Location: Las Vegas

Eran Segal

Eran Segal investigates Windows container isolation (Process Isolation & Hyper-V), demonstrating novel container escape techniques via Silo IPC mechanisms.

Cloud Village·35 min

• DEF CON
• Malware
• Date: Aug 2021
• Location: Las Vegas

Daniel Prizmant

Daniel Prizmant demonstrates fundamental architectural security flaws in Windows Server Process-Isolated Containers, executing root container escapes.