Tag: NtFS

GhostTree Technique Traps EDR Scanners in Infinite Directory Loops

GhostTree exploits NTFS junctions to create recursive directory loops that trap EDR scanners in infinite traversal paths, leaving malicious files…