No AI analysis yet.
According to its author, EDR-Freeze is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and anti-malware without needing to use the BYOVD (Bring Your Own Vulnerable Driver) attack method as EDR-Freeze operates entirely in user mode.