UNG002 SFX Beacon AMSI/ETW Patching

Ibrahim Saud@tektrix

•updated Jun 21, 2026•2•1•6

Identifies the SFX module bdzsfx.x64.sfx interacting with security providers to disrupt runtime telemetry.