Driver Signature Enforcement

Entity category: LAW

BigTech Companies

Decade-Old EnCase Driver Still Defeats Modern EDR

A new malware strain can disable modern EDR solutions by exploiting an outdated, revoked-but-still-loadable kernel driver from old EnCase forensics…

Read More »
BigTech Companies

Forensic Tool’s Signed Driver Exploited as EDR Killer

Hackers exploited a revoked but still functional kernel driver from the EnCase forensic tool to disable endpoint security software, highlighting…

Read More »