junctions and reparse points

Junctions and reparse points are NTFS features that allow directory path redirection in Windows. Recent discussions highlight security concerns, such as the GhostTree attack, which exploits junctions to bypass endpoint detection and response (EDR) tools during recursive scanning. Mitigations include applying Windows updates, enabling Microsoft's junction protections, and using tools like RedirectionGuard. Administrators should not rely solely on EDR for junction safety; instead, they must patch systems and ensure scanners handle path redirection with cycle detection and privilege awareness. These topics are relevant for Windows security, file server management, and enterprise IT hardening.