A newly released red team EDRChoker tool introduces a novel technique for severing the connection between Endpoint Detection and Response (EDR) agents and their cloud servers, not by blocking packets outright, but by throttling bandwidth so aggressively that agents continuously time out and lose contact with their command infrastructure. The tool was developed and published by […]
The post EDRChoker Uses Quality of Service Policies to Disrupt EDR Security Processes appeared first on Cyber Security News.