DefenderKiller: How Vulnerable Drivers Are Being Abused to Disable Endpoint Security
The abuse of legitimate, vulnerable drivers remains a persistent method of evading endpoint security controls. As EDR killer techniques become publicly available, researchers and threat…