[fritz]

Junior members can't post links, 2 avoid spam. But chop the link up and post it,  if it's not spam it's tolerated ( i think :p ). Seems interesting

Alright if I have your authorisation
blog.checkpoint.com/wp-content/uploads/2017/05/DiamondFox_Report_170510-2.pdf

always  interesting to read, read the appendices too that's where the real interesting stuff is :p
http://blog.checkpoint.com/wp-content/up...0510-1.pdf

Woh you're right there are some really interesting stuff in the appendices !
This Checkpoint company does a great job, pretty awesome they published it publicly

---

Hey
thank you ... it's refreshing to see replys- it's what forums all about.
I will check out the link and I appreicate it tremendously.
If anyone else has any relative input or opinion about my og questions please add to the thread.It is very helpful.All of us each have bits and pieces of ideas data and infos.So anything is a fit to the big puzzle of fact.
👍

I just arrived here so I'm not qualified enough to answer properly to your original question(s), but I'd say most tools you find publicly & freely are outdated. I guess lots of them should still work but they certainly are detected by most antivirus softwares, or even natively.
For example on the second pdf you can see a list of antivirus, knowing the document is 3 years old I bet there are even more now. I'll probably do more tests soon though !

And I think (but someone will correct me if I'm wrong) that with a good new crypter (so.... not free) you could make almost any working tool invisible to antivirus and windows defender.

EDIT : But... It was the same in 2005, wasn't it ? I remember it was the same kind of dilemma (except you couldn't find non-free ones as easily as now I guess), public tools were always a bit outdated