New EDR-Freeze tool uses Windows WER to suspend security software

A novel attack technique named EDR-Freeze has emerged, demonstrating the ability to suspend endpoint detection and response (EDR) and antivirus (AV) processes on Windows systems using only user-mode operations.