SCI AI YA Yaniv Forensic Insights Into An Edr Freeze Attack TL;DR: Edr-freeze is a proof-of-concept that leverages werfaultsecure.exe and minidumpwritedump to suspend edr processes (observed…
BIO YA Yaniv Edr‑freeze: Freezing Edr And Antivirus Processes Via Windows Error Reporting TL;DR: Edr‑freeze abuses minidumpwritedump and werfaultsecure to suspend ppl‑protected edr/av processes from user mode, creating extended…
BIO CH Chayanin Khawsanit Evading Windows Defender Detections with a combination of MiniDumpWriteDump, Donut, and Process… In today’s landscape, Mimikatz, a credential-dumping tool, is detectable by every Windows Defender Antivirus and EDR. This is why certain…