BTR Reforged Detection

https://research.checkpoint.com/2026/btr-reforged-weaponizing-defenders-remediation-driver-as-a-kernel-operation-primitive/

Microsoft Sentinel (KQL)