The Gentlemen - EDR Killer Tool Execution
Detects execution of The Gentlemen custom EDR killer tools All.exe and Allpatch2.exe that exploit vulnerable drivers to terminate endpoint security processes at kernel level.
YARA-L
Detects execution of The Gentlemen custom EDR killer tools All.exe and Allpatch2.exe that exploit vulnerable drivers to terminate endpoint security processes at kernel level.
Already have an account?