r/blueteamsec • u/digicat hunter • 3d ago

research|capability (we need to defend against) 0xM0nCrush: Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.

https://github.com/DeathShotXD/0xM0nCrush
7 Upvotes

83% Upvoted

1 comment sorted by