HomeAI · summaries
Storia in 3 fonti
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and registry operations.
Confronto fonti
3 prospettive sulla stessa storiaTimeline cronologica
- ·
thehackernews.com
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and registry operations.
- ·
ilsoftware.it
Microsoft Defender, un suo driver può eliminare gli antivirus all'avvio
BTR.sys, il driver di Microsoft Defender, può essere riutilizzato per operazioni kernel contro i sistemi di sicurezza di Windows.
