The Journey of Hunting In-the-Wild Windows LPE 0day

This talk will focus on our story of how to hunt in-the-wild Windows LPE during 2020 and 2021: why we think this is possible, how we study historical cases, how we use learning experience to develop a detection method, and how we continuously improve the method to make it more accurate and effective. By using this method, we successfully captured two in-the-wild Windows LPE 0day and an in-the-wild Windows LPE 1day.
Presented by Quan Jin
Full Abstract and Presentation Materials: www.blackhat.c...