Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Exploiting a Vulnerable Minifilter Driver to Create a Process Killer
Trends, Reports, Analysis
February 12, 2024
Security Affairs
The technique involves using a vulnerable signed Minifilter Driver to create a program capable of terminating a targeted process, particularly to evade detection by security solutions like EDR.
Read More
Minifilter Driver
Vulnerable Driver
process termination
Kernel
Bring Your Own Vulnerable Driver (BYOVD)
Publisher
Previous
US offers $10M reward for info on Hive ransomware group ...
Incident Response, Learnings
Next
Ransomware Actors Hit Zero-Day Exploits Hard in 2023
Trends, Reports, Analysis