threat-intel
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has discovered a method to weaponize Microsoft Defender's own built-in boot-time remediation driver (BTR.sys) to delete security software and manipulate Windows systems. This technique, dubbed ‘BTR R…
High
