Settra BYOVD: gdrv.sys Driver Load via sc create

Ibrahim Saud@tektrix

•updated Sep 18, 2026•0•0•5

Detects the installation or service creation of 'gdrv.sys', a known vulnerable GIGABYTE driver often abused in Bring Your Own Vulnerable Driver (BYOVD) attacks to escalate privileges.