Kernel Exploitation

Windows MiniFilter Can Be Abused To Bypass EDR

The Windows MiniFilter driver, like the Sysmon driver, can be abused to prevent EDR drivers from loading.  Endpoint Detection and…

2 years ago