Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Attackers reaching for kernel access on a Windows machine bring a driver Microsoft already trusts. It is signed, it loads, and it carries a known flaw. That flaw gives them enough room to tamper with memory or disable the security software watching the host.