EnPortv.sys

Entity category: PRODUCT

BigTech Companies

Forensic Tool’s Signed Driver Exploited as EDR Killer

February 5, 2026

Person in hoodie types at computer screens in a dimly lit, red-toned room.

Hackers exploited a revoked but still functional kernel driver from the EnCase forensic tool to disable endpoint security software, highlighting…