https://rothecamyricoides.github.io/ RothecaMyricoides 的个人博客 / Personal blog for project notes, technical writeups, and occasional thoughts. en Tue, 14 Jul 2026 00:00:00 +0800 https://rothecamyricoides.github.io/posts/module-stomping-edr-evaluation.html https://rothecamyricoides.github.io/posts/module-stomping-edr-evaluation.html Tue, 14 Jul 2026 00:00:00 +0800 在受控实验环境中，对注入后模块践踏在 Elastic Security 与 MDE P2 中的执行结果、阻断动作和遥测可见性进行对比观察。 / A controlled-lab comparison of how Elastic Security and MDE P2 handled post-injection module stomping: what executed, what was blocked, and what remained visible in telemetry.