---
id: 3969
title: "What the Vuln: EDR Bypass with LoLBins"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/edr-bypass-with-lolbins"
published_at: "2023-03-23T00:00:00Z"
tags: ["red-team", "c2", "edr-bypass", "lolbins", "deimos", "defense-evasion"]
phying_url: "https://phying.com/item/3969"
lang: en
---

# What the Vuln: EDR Bypass with LoLBins

## Summary

In the What the Vuln series, Bishop Fox demonstrates using Microsoft-signed Living off the Land Binaries to bypass an EDR solution and deploy the Deimos C2 agent, drawn from a hands-on 0DayAllDay lab.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2023-03-23T00:00:00Z
- **Original:** https://bishopfox.com/blog/edr-bypass-with-lolbins
- **Phying News:** https://phying.com/item/3969