Vid back up
I’ve tested a few next gen products, and the latest version def detected a morphed mimikatz loaded using reflection ie filelessly.
Looks like had a really old version of S1.
No product is 100% and defence in depth is needed, but S1 was the best we tested using version 2.5. He had 1.8.
And no I am not connected or work for S1 in any way shape or form.
Just my tuppence worth.
Biting the hand that feeds IT
