The forensic tool’s driver was signed with a digital certificate that expired years ago, but major security gaps allowed Windows to load it.
First seen on darkreading.com
Jump to article: www.darkreading.com/threat-intelligence/encase-driver-weaponized-edr-killers-persist
