S12 - 0x12Dark Development·Oct 1Blinding EDR Drivers via IRP Dispatch Table OverwriteWelcome to this new Medium post, today we are going to explore IRP Dispatch Table Overwrite, a BYOVD technique that locates a driver object…
Jehad Abudagga·Jul 17Introducing CVE-2026–36425 | OPSWAT EDR TerminatorHello everyone, hope you all are doing well.
Jehad Abudagga·Jun 29Born to Defend, Weaponized to Kill: Weaponizing Microsoft’s Own Driver to Kill EDRsHello again everyone…
Nimesh nakum·Apr 19BYOVD Explained — How Attackers Use Signed Drivers to Kill EDRsYour EDR sees everything. Process launches, thread injections, DLL loads, filesystem writes. It has eyes inside the kernel — little hooks…
