EDR-Freeze Propose Change

According to its author, EDR-Freeze is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and anti-malware without needing to use the BYOVD (Bring Your Own Vulnerable Driver) attack method as EDR-Freeze operates entirely in user mode.

References

There is no Yara-Signature yet.