In-memory payload execution
Named by 2 kept items in this workspace.
Search every workspace for In-memory payload execution. It matches the name as written, so it can find other things that share it.
The items that name it 2
The Amatera payload often resides entirely in memory, evading disk-based detection.
22MB Rust loader carrying an embedded Go infostealer that decrypts entirely in memory with no second-stage download
All techniques in this workspace.