Crowdstrike bypass and inject powershell

Hell0,

I wanted to see if anyone has been able (how hard) to reverse $hell crowdstrike protected windows 11 machines.
The idea would be to write and run a .ps1 file on the victims computer, the whole thing would be air-gap.
Any tips/insights into how crowdstrike protects the machine is welcomed!

Obviously this is for pentesting and educational purposes only.
Cheers :evergreen_tree:

1 Like