Wrapping Up
In this module, we have outlined the concept
of application whitelisting
and bypassed AppLocker,
which blocks much of our previous tradecraft.
We have introduced various techniques to bypass many types
of AppLocker rules, ranging from simple bypasses to much
more complicated bypasses that leverage other native,
trusted, and undocumented applications.
We also updated our tradecraft to execute and gain client-side
execution on a hardened workstation, allowing us to
continue our post-exploitation tactics.