{"id":4762,"date":"2026-08-30T10:49:02","date_gmt":"2026-08-30T09:49:02","guid":{"rendered":"https:\/\/www.pikered.com\/learn\/persistent-in-memory-module-loading\/"},"modified":"2026-08-30T10:49:02","modified_gmt":"2026-08-30T09:49:02","slug":"persistent-in-memory-module-loading","status":"publish","type":"post","link":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/","title":{"rendered":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework"},"content":{"rendered":"","protected":false},"excerpt":{"rendered":"<p>Every COFF execution means allocate, protect, execute, free; repeat that 20 times and EDR correlation engines have plenty to work with.<br \/>\nWe changed the model: load once, encrypt at rest, execute N times on the same memory, unload when done.<\/p>\n","protected":false},"author":2,"featured_media":4739,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-4762","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-non-categorizzato"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered\" \/>\n<meta property=\"og:description\" content=\"Every COFF execution means allocate, protect, execute, free; repeat that 20 times and EDR correlation engines have plenty to work with. We changed the model: load once, encrypt at rest, execute N times on the same memory, unload when done.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/\" \/>\n<meta property=\"og:site_name\" content=\"Pikered\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-30T09:49:02+00:00\" \/>\n<meta name=\"author\" content=\"Marco\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marco\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/\"},\"author\":{\"name\":\"Marco\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#\\\/schema\\\/person\\\/15a9fa9a7ed9e0b29f18cd151e29694f\"},\"headline\":\"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework\",\"datePublished\":\"2026-08-30T09:49:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/\"},\"wordCount\":10,\"publisher\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/articolo_coffee.png\",\"articleSection\":[\"Non categorizzato\"],\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/\",\"url\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/\",\"name\":\"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/articolo_coffee.png\",\"datePublished\":\"2026-08-30T09:49:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/articolo_coffee.png\",\"contentUrl\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/articolo_coffee.png\",\"width\":1028,\"height\":944},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/persistent-in-memory-module-loading\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/\",\"name\":\"Pikered\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#organization\",\"name\":\"Pikered\",\"url\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/pikered_logo-1.svg\",\"contentUrl\":\"https:\\\/\\\/www.pikered.com\\\/wp-content\\\/uploads\\\/2020\\\/12\\\/pikered_logo-1.svg\",\"width\":200,\"height\":75,\"caption\":\"Pikered\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/#\\\/schema\\\/person\\\/15a9fa9a7ed9e0b29f18cd151e29694f\",\"name\":\"Marco\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g\",\"caption\":\"Marco\"},\"url\":\"https:\\\/\\\/www.pikered.com\\\/it\\\/learn\\\/author\\\/marco\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/","og_locale":"it_IT","og_type":"article","og_title":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered","og_description":"Every COFF execution means allocate, protect, execute, free; repeat that 20 times and EDR correlation engines have plenty to work with. We changed the model: load once, encrypt at rest, execute N times on the same memory, unload when done.","og_url":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/","og_site_name":"Pikered","article_published_time":"2026-08-30T09:49:02+00:00","author":"Marco","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Marco"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#article","isPartOf":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/"},"author":{"name":"Marco","@id":"https:\/\/www.pikered.com\/it\/#\/schema\/person\/15a9fa9a7ed9e0b29f18cd151e29694f"},"headline":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework","datePublished":"2026-08-30T09:49:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/"},"wordCount":10,"publisher":{"@id":"https:\/\/www.pikered.com\/it\/#organization"},"image":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pikered.com\/wp-content\/uploads\/2026\/08\/articolo_coffee.png","articleSection":["Non categorizzato"],"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/","url":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/","name":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework - Pikered","isPartOf":{"@id":"https:\/\/www.pikered.com\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#primaryimage"},"image":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pikered.com\/wp-content\/uploads\/2026\/08\/articolo_coffee.png","datePublished":"2026-08-30T09:49:02+00:00","breadcrumb":{"@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#primaryimage","url":"https:\/\/www.pikered.com\/wp-content\/uploads\/2026\/08\/articolo_coffee.png","contentUrl":"https:\/\/www.pikered.com\/wp-content\/uploads\/2026\/08\/articolo_coffee.png","width":1028,"height":944},{"@type":"BreadcrumbList","@id":"https:\/\/www.pikered.com\/it\/learn\/persistent-in-memory-module-loading\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pikered.com\/it\/"},{"@type":"ListItem","position":2,"name":"Persistent In-Memory Module Loading: Reducing Post-Exploitation Footprint with ZAIUX\u00ae Framework"}]},{"@type":"WebSite","@id":"https:\/\/www.pikered.com\/it\/#website","url":"https:\/\/www.pikered.com\/it\/","name":"Pikered","description":"","publisher":{"@id":"https:\/\/www.pikered.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pikered.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.pikered.com\/it\/#organization","name":"Pikered","url":"https:\/\/www.pikered.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.pikered.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/www.pikered.com\/wp-content\/uploads\/2020\/12\/pikered_logo-1.svg","contentUrl":"https:\/\/www.pikered.com\/wp-content\/uploads\/2020\/12\/pikered_logo-1.svg","width":200,"height":75,"caption":"Pikered"},"image":{"@id":"https:\/\/www.pikered.com\/it\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.pikered.com\/it\/#\/schema\/person\/15a9fa9a7ed9e0b29f18cd151e29694f","name":"Marco","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0c2b9ace09796b73f1f86a144992bcfdaf8dea4b0c65d60f2761e995c4c77f78?s=96&d=mm&r=g","caption":"Marco"},"url":"https:\/\/www.pikered.com\/it\/learn\/author\/marco\/"}]}},"_links":{"self":[{"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/posts\/4762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/comments?post=4762"}],"version-history":[{"count":0,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/posts\/4762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/media\/4739"}],"wp:attachment":[{"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/media?parent=4762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/categories?post=4762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pikered.com\/it\/wp-json\/wp\/v2\/tags?post=4762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}