junctions and reparse points

Verdict: patch Windows and endpoint tools as updates become available, enable Microsoft’s junction mitigations wherever your build and services support them, and do not treat EDR recursive scanning as a control you can safely trust by itself. GhostTree matters because it turns a familiar Windows...