SCI AI YA Yaniv Forensic Insights Into An Edr Freeze Attack TL;DR: Edr-freeze is a proof-of-concept that leverages werfaultsecure.exe and minidumpwritedump to suspend edr processes (observed…
BIO YA Yaniv Edr‑freeze: Freezing Edr And Antivirus Processes Via Windows Error Reporting TL;DR: Edr‑freeze abuses minidumpwritedump and werfaultsecure to suspend ppl‑protected edr/av processes from user mode, creating extended…
