Breaking the Whitelist: Techniques for Bypassing Windows Application Controls

No ratings

Presented at SnowFROC 2026 by

Tejas Luthra

Application whitelisting solutions like AppLocker and Windows Defender Application Control (WDAC) are designed to stop unauthorized code from running. But attackers have found numerous ways around these controls—often using tools already built into Windows.