When Cash Runs on Windows: A Red Team Look at ATM Attack Surfaces (ESP)

From Live Malware to Red Team Tradecraft: Process Hollowing in msbuild.exe (ESP-POR)