mirror of
https://github.com/senzee1984/EDRPrison
synced 2026-08-09 13:09:24 +00:00
Update README.md
This commit is contained in:
@@ -71,7 +71,7 @@ The following approaches can be used to detect or mitigate the use of EDRPrison.
|
||||
|
||||
### Driver Load Event
|
||||
|
||||
If the WinDivert driver is not already installed on the system, EDRPrison will install the callout driver upon first execution. Both the OS and telemetry systems will log this event.
|
||||
If the WinDivert driver is not already installed on the system, EDRPrison will install the callout driver upon first execution. Both the OS and telemetry data will log this event.
|
||||
|
||||
### Existence of WinDivert Files
|
||||
|
||||
|
||||
Reference in New Issue
Block a user