EnCase Driver Weaponized as EDR Killers Persist

The forensic tool’s driver was signed with a digital certificate that expired years ago, but major security gaps allowed Windows to load it.

darkreading – ​Read More