SCI AI YA Yaniv Forensic Insights Into An Edr Freeze Attack TL;DR: Edr-freeze is a proof-of-concept that leverages werfaultsecure.exe and minidumpwritedump to suspend edr processes (observed…
DF dfirloading · Detect FYI Forensic Insights into an EDR Freeze Attack I have analyzed EDR-Freeze.exe, which puts EDR processes into a suspended “coma” state.
BIO YA Yaniv Edr‑freeze: Freezing Edr And Antivirus Processes Via Windows Error Reporting TL;DR: Edr‑freeze abuses minidumpwritedump and werfaultsecure to suspend ppl‑protected edr/av processes from user mode, creating extended…
