DEF CON 31 - Staying Undetected Using the Windows Container Isolation Framework - Daniel Avinoam

The use of containers became an integral part of any resource-efficient and secure environment. Starting from Windows Server 2016, Microsoft released its version of this solution called Windows Containers, which offers either a process or Hyper-V isolation modes.

In both cases, an efficient file system separation should be provided. On one hand, each container should be able to access system files and write changes that will not affect the host. On the other, copying the entire main volume on each …

called cases con container containers daniel def def con def con 31 environment file file system framework hyper-v isolation microsoft process server solution system undetected version windows windows container isolation framework windows server