cognitive cybersecurity intelligence

News and Analysis

Search

EDR-Freeze: Technical Mechanics and Forensic Artifacts Exposed

EDR-Freeze: Technical Mechanics and Forensic Artifacts Exposed

EDR-Freeze is a proof-of-concept tool that forces endpoint detection and response (EDR) or antivirus processes into a temporary “coma.” Instead of installing a vulnerable driver, it leverages legitimate Windows Error Reporting components, specifically WerFaultSecure.exe and the MiniDumpWriteDump API to pause security processes from user mode. By racing threads at just the right moment, EDR-Freeze suspends all […]
The post EDR-Freeze: Technical Mechanics and Forensic Artifacts Exposed appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Source: gbhackers.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts