language:
- en
license: apache-2.0
tags: - cybersecurity
- edr-evasion
- red-team
- blue-team
- detection-engineering
- ayinedjimi-consultants
- en
pretty_name: EDR/XDR Evasion Techniques (English)
size_categories: - 1K<n<10K
task_categories: - question-answering
- text-classification
authors: - name: Ayi NEDJIMI
url: https://ayinedjimi-consultants.fr/bio.html
source_datasets: - original
EDR/XDR Evasion Techniques - English Dataset
Comprehensive bilingual dataset on EDR/XDR evasion techniques, designed for red team and blue team professionals. This dataset covers offensive techniques, detection rules, EDR/XDR solution comparisons and detailed Q&A.
Dataset Contents
1. evasion_techniques (~40 techniques)
Evasion techniques organized by category:
- Memory Evasion: AMSI bypass, ETW patching, NTDLL unhooking, shellcode injection, module stomping, Phantom DLL hollowing
- Userland Hooking Bypass: Direct syscalls (SysWhispers, Hell's Gate, Halo's Gate), manual mapping, hardware breakpoints, indirect syscalls
- EDR Agent Tampering: PPL bypass, minifilter tampering, kernel callback removal, ETW provider disabling, WMI abuse
- Living off the Land (LOLBins): MSBuild, InstallUtil, Regsvr32, CMSTP, Mshta, certutil, bitsadmin, rundll32, PowerShell CLM bypass
- Sandbox/VM Detection: Hardware fingerprinting, timing-based detection, user interaction checks, environment artifacts
- Network Evasion: Domain fronting, DNS tunneling, encrypted C2, legitimate service abuse, protocol impersonation
2. detection_rules (~25 rules)
Multi-format detection rules:
- Sigma rules for generic detection
- KQL queries for Microsoft Defender for Endpoint
- YARA rules for memory and static analysis
- Sysmon configurations for telemetry collection
3. edr_comparison (15 solutions)
Detailed comparison of major EDR/XDR solutions with evasion resistance scores.
4. questions_answers (80 Q&A)
In-depth questions and answers covering all aspects of EDR evasion and detection.
Usage
from datasets import load_dataset
dataset = load_dataset("AYI-NEDJIMI/edr-evasion-en")
# Access evasion techniques
for technique in dataset["evasion_techniques"]:
print(f"{technique['id']}: {technique['name']}")
# Access detection rules
for rule in dataset["detection_rules"]:
print(f"{rule['rule_type']}: {rule['detection_name']}")
# Q&A
for qa in dataset["questions_answers"]:
print(f"Q: {qa['question']}")
print(f"A: {qa['answer'][:100]}...")
Reference Articles
This dataset is based on research and articles published by AYI-NEDJIMI Consultants:
- EDR/XDR Evasion Techniques - Complete guide to evasion and detection techniques
- Top 10 EDR/XDR Solutions 2025 - Detailed market solution comparison
- Threat Hunting with Microsoft 365 Defender and Sentinel - Practical threat hunting guide
- Top 10 Active Directory Attacks - AD attack and defense techniques
- White Paper: Anatomy of a Ransomware Attack - Complete ransomware analysis
About the Author
AYI-NEDJIMI Consultants is a cybersecurity consulting firm specializing in red teaming, blue teaming, detection engineering and incident response. Our experts help organizations secure their infrastructure against advanced threats.
- Website: https://ayinedjimi-consultants.fr
- Free Resources: Articles, white papers and cybersecurity datasets
- HuggingFace Collection: AYI-NEDJIMI
License
This dataset is distributed under the MIT license. For educational and security research purposes only.
Citation
@dataset{ayinedjimi_edr_evasion_en_2025,
title={EDR/XDR Evasion Techniques - English Dataset},
author={AYI-NEDJIMI Consultants},
year={2025},
publisher={HuggingFace},
url={https://huggingface.co/datasets/AYI-NEDJIMI/edr-evasion-en}
}
Author
Ayi NEDJIMI - Cybersecurity Consultant & Trainer | AI Expert
Related Articles
- Evasion EDR/XDR
- Top 10 EDR/XDR 2025
- Threat Hunting M365 Defender Sentinel
- Top 10 Attaques Active Directory
- Livre Blanc Anatomie Ransomware
Free Cybersecurity Resources
- Livre Blanc NIS 2
- Livre Blanc Sécurité Active Directory
- Livre Blanc Pentest Cloud AWS/Azure/GCP
- Livre Blanc Sécurité Kubernetes
- Livre Blanc IA Cyberdéfense
- Livre Blanc Anatomie Ransomware
- Guide Sécurisation AD 2025
- Guide Tiering Model AD
Part of the Collection
This dataset is part of the Cybersecurity Datasets & Tools Collection by AYI-NEDJIMI Consultants.