EDRChoker uses Policy-based Quality of Service (QoS) to set hard bandwidth caps (throttling) on Endpoint Detection and Response (EDR) agents, causing them to always time out - effectively blocking them.
#itsecurity #securityblog #altimalware
zerosalarium.com/2026/06/edr…
1
25
108
13,673
May 30
Thank you for bonking
Looked at that float site last night and stuff was like 5k USD so makes sense as to why they'd wanna nab it
12
1,809
May 3
"MSFT expired trusted ROOT cert have started many stories...followed by Verisign, Sectigo, Geostrust ..." virustotal.com/graph/embed/g…>> 2022-07-13, other part of the story "AddTrust_External_CA_Root.cer" virustotal.com/gui/file/687f… plethora of invalid, expired certs @LevelBlueCyber 2096
2
50
May 3
...on the other end the benefit is: ‘for whom’ neverending certs story🤕 Today, update published 'huzz07rt740' @virustotal "... Microsoft Security... promised to remedy the mess centrally." We will see😶affected cert hashes👇x.com/userlolxxl/status/2050…
May 2
... certificates need deep healthcare because manyyy of them are invalids .. what about raw therapy for these certs?
2
67
Just #Defender and Just #DigiCert ???
@userlolxxl @skocherhan @KulinskiArkadi @magicswordio
@cyb3rops @thor_scanner in progress with some custom rules. A bit of noise - the problem on this end is: ‘to whom’ my sample device (a psuedo-clone) is hooked up to = ughhhhhhhh
5
1
3
1,651
Deploy locally your own LLM with rag it wil do this job easily
1
3
118
Apr 8
Apr 8
Should be fixed in a bit. We've been sending everyone emails since October 2025 techcommunity.microsoft.com/…
1
4
1,849
Remember the good days when people had to hack through all your internal layers of defense instead of scanning a central point of failure in the cloud using a single tool.
It's almost like central points of failure are a bad thing.
2
15
637