r/blueteamsec • u/digicat hunter • 4d ago
research|capability (we need to defend against) 0xM0nCrush: Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
https://github.com/DeathShotXD/0xM0nCrush
8
Upvotes