EDRChoker: Choking The Telemetry Stream to Bypass Defenses

EDRChoker uses Policy-based Quality of Service (QoS) to set hard bandwidth caps (throttling) on Endpoint Detection and Response (EDR) agents, causing them to always time out – effectively blocking them. submitted by /u/Cold-Dinosaur [link] [comments]Technical Information Security Content & DiscussionRead More