BYOVD Vulnerable gdrv.sys Driver File Detection
Detects the presence of the known vulnerable gdrv.sys driver on disk. This driver is frequently utilized in Bring Your Own Vulnerable Driver (BYOVD) attacks to gain kernel-mode access, which is often leveraged to disable endpoint security products or escalate privileges.
YARA
