Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection
A local uncensored Qwen model revised an LSASS dumper until two lab EDRs no longer detected it.
64
Organization
Project Black
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 26, 2026
- Last mentionedSep 26, 2026
Timeline
2 articles · newest firstUncensored Local AI Model Bypasses EDR to Dump Windows LSASS Credentials
An uncensored local Qwen derivative generated an LSASS dumper that evaded two EDRs in lab tests.
62
Appears with
- Nvidiavendor · 2
- Windowsproduct · 2
- Anthropicvendor · 2
- Microsoftvendor · 2
- Anthropicorganization · 2
- Claude Opus 4.8ai model · 1
- Qwen 3.8 27Bai model · 1
- Claude Opus 5ai model · 1
- DeepSeek v4 Flash 0731ai model · 1
- Credential Guardproduct · 1
- LSASSproduct · 1
- DeepSeek v4 Flashai model · 1
- Claude Sonnet 5ai model · 1
- Claudeai model · 1
- Qwen3.8-27Bai model · 1
- Elasticvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.