#EDR Evasion
All CosmicBytez Labs articles tagged #EDR Evasion, across news, security advisories, how-to guides, and projects.
- News
Bring Your Own Vulnerable Driver: What Detection Teams Should Actually Hunt
SentinelOne splits EDR-killer attacks into four distinct behavior hunts — BYOVD, bring-your-own-installer, admin-to-kernel, and driverless suspension.
- News
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service operation distributes a sophisticated EDR-killing toolkit called GentleKiller to affiliates, capable of terminating...
- Newsletter
June 3 Digest: AI Ransomware, Netlogon RCE, Miasma Supply Chain
An AI-generated ransomware toolkit automates EDR evasion; Windows Netlogon RCE is actively exploited on domain controllers; the Miasma campaign hits Red Hat…
- News
AI-Built Ransomware Toolkit Automates EDR Evasion and AD Discovery
A threat actor has deployed an AI-generated ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and…
- News
Reynolds Ransomware Embeds BYOVD Driver to Disable EDR
A new ransomware strain called Reynolds bundles a Bring Your Own Vulnerable Driver component directly in its payload, killing EDR processes from...