mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
28 KiB
28 KiB
| 1 | driver_name | driver_description | is_driver |
|---|---|---|---|
| 2 | *\ADV64DRV.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 3 | *\Agent64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 4 | *\ALSysIO64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 5 | *\amifldrv64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 6 | *\AsIO.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 7 | *\AsIO64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 8 | *\asmmap64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 9 | *\AsrAutoChkUpdDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 10 | *\AsrDrv10.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 11 | *\AsrDrv101.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 12 | *\AsrIbDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 13 | *\AsrOmgDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 14 | *\AsrRapidStartDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 15 | *\AsrSmartConnectDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 16 | *\AsUpIO.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 17 | *\atillk64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 18 | *\BS_Def64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 19 | *\CITMDRV_AMD64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 20 | *\CITMDRV_IA64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 21 | *\cpuz_x64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 22 | *\cpuz141.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 23 | *\dbutil_2_3.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 24 | *\Dh_Kernel_10.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 25 | *\Dh_Kernel.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 26 | *\gdrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 27 | *\GLCKIO2.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 28 | *\HOSTNT.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 29 | *\HwRwDrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 30 | *\inpoutx64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 31 | *\iomem64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 32 | *\Mhyprot2.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 33 | *\MsIo64.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 34 | *\msrhook.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 35 | *\NTIOLib.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 36 | *\OpenLibSys.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 37 | *\Se64a.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 38 | *\smep_capcom.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 39 | *\smep_namco.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 40 | *\SysInfo.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 41 | *\VProEventMonitor.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 42 | *\WCPU.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 43 | *\WINIODrv.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 44 | *\WinRing0.sys | https://github.com/namazso/physmem_drivers | TRUE |
| 45 | *\physmem.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 46 | *\procexp152.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 47 | *\viraglt64.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 48 | *\vboxdrv.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 49 | *\rwdrv.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 50 | *\speedfan.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 51 | *\kprocesshacker.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 52 | *\sandra.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 53 | *\elbycdio.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 54 | *\goad.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 55 | *\aswsnx.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 56 | *\sandbox.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 57 | *\nicm.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 58 | *\nscm.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 59 | *\ncpl.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 60 | *\elrawdsk.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 61 | *\DBUtilDrv2.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 62 | *\BS_RCIO64.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 63 | *\mhyprot.sys | https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/ | TRUE |
| 64 | *\EneTechIo64.sys | https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c | TRUE |
| 65 | *\amp.sys | https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c | TRUE |
| 66 | *\EneIo64.sys | https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c | TRUE |
| 67 | *\ATSZIO.sys | https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c | TRUE |
| 68 | *\NalDrv.sys | https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c | TRUE |
| 69 | *\DirectIo32.sys | https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md | TRUE |
| 70 | *\DirectIo64.sys | https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md | TRUE |
| 71 | *\AsUpIO64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 72 | *\AsrDrv102.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 73 | *\AsrDrv103.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 74 | *\BSMEMx64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 75 | *\BSMIXP64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 76 | *\BSMIx64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 77 | *\BS_Flash64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 78 | *\BS_HWMIO64_W10.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 79 | *\BS_HWMIo64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 80 | *\BS_I2c64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 81 | *\GVCIDrv64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 82 | *\HwOs2Ec10x64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 83 | *\HwOs2Ec7x64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 84 | *\NBIOLib_X64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 85 | *\NCHGBIOS2x64.SYS | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 86 | *\NTIOLib_X64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 87 | *\PhlashNT.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 88 | *\Phymemx64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 89 | *\UCOREW64.SYS | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 90 | *\WinFlash64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 91 | *\WinRing0x64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 92 | *\dbk64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 93 | *\mtcBSv64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 94 | *\nvflash.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 95 | *\nvflsh64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 96 | *\phymem64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 97 | *\rtkio64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 98 | *\rtkiow10x64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 99 | *\rtkiow8x64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 100 | *\segwindrvx64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 101 | *\superbmc.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 102 | *\semav6msr.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 103 | *\piddrv64.sys | https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md | TRUE |
| 104 | *\BS_I2cIo.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 105 | *\rtkio.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 106 | *\AMDRyzenMasterDriver.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 107 | *\LHA.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 108 | *\kEvP64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 109 | *\BSMI.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 110 | *\TmComm.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 111 | *\cpuz.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 112 | *\iQVW64.SYS | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 113 | *\vmdrv.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 114 | *\HpPortIox64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 115 | *\AMDPowerProfiler.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 116 | *\CorsairLLAccess64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 117 | *\RTCore64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 118 | *\libnicm.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 119 | *\procexp.Sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 120 | *\viragt.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 121 | *\viragt64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 122 | *\AsrDrv106.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 123 | *\zamguard64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 124 | *\zam64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 125 | *\fidpcidrv64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 126 | *\MsIo32.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 127 | *\winio64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 128 | *\capcom.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 129 | *\IOMap64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 130 | *\ATSZIO64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 131 | *\aswVmm.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 132 | *\FairplayKD.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 133 | *\pgldqpoc.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 134 | *\iqvw64e.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 135 | *\Monitor_win10_x64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 136 | *\srvnetbus.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 137 | *\Mslo64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 138 | *\pcdsrvc_x64.pkms | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 139 | *\krpocesshacker.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 140 | *\HWiNFO64A.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 141 | *\rzpnk.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 142 | *\magdrvamd64.sys | https://github.com/elastic/protections-artifacts/search?q=VulnDriver | TRUE |
| 143 | *\driver7-x64.sys | https://github.com/Chigusa0w0/AsusDriversPrivEscala | TRUE |
| 144 | *\driver7-x86-withoutdbg.sys | https://github.com/Chigusa0w0/AsusDriversPrivEscala | TRUE |
| 145 | *\driver7-x86.sys | https://github.com/Chigusa0w0/AsusDriversPrivEscala | TRUE |
| 146 | *\gmer.sys | https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml | TRUE |
| 147 | *\PCADRVX64.sys | https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml | TRUE |
| 148 | *\clfs.sys | https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml | TRUE |
| 149 | *\ActiveHealth.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 150 | *\CAM_V3.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 151 | *\GameFire.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 152 | *\OpenHardwareMonitor.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 153 | *\OpenHardwareMonitorLib.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 154 | *\OpenHardwareMonitorReport.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 155 | *\SmartDashboard.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 156 | *\SystemGauge.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 157 | *\SystemGaugeX7.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 158 | *\VideoNovaServerControllerService.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 159 | *\ellp_service.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 160 | *\hardwareproviders.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 161 | *\ohm.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 162 | *\sensorsview32_64.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 163 | *\touchpointanalyticsclient.sys | https://eclypsium.com/2019/11/12/mother-of-all-drivers/ | TRUE |
| 164 | *\ASIO32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 165 | *\asrdrv104.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 166 | *\AsrSetupDrv103.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 167 | *\bandai.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 168 | *\dbutil.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 169 | *\fiddrv.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 170 | *\fiddrv64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 171 | *\fidpcidrv.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 172 | *\DirectIo.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 173 | *\hw_sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 174 | *\mhyprot3.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 175 | *\MsIo.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 176 | *\otipcibus.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 177 | *\piddrv.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 178 | *\semav6msr64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 179 | *\80.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 180 | *\netfilterdrv.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 181 | *\81.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 182 | *\full.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 183 | *\nstrwsk.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 184 | *\nt2.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 185 | *\nt3.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 186 | *\nt5.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 187 | *\b4.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 188 | *\bw.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 189 | *\bwrs.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 190 | *\bwrsh.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 191 | *\TGSafe.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 192 | *\BlackBoneDrv10.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 193 | *\LgDCatcher.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 194 | *\gameink.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 195 | *\windows-xp-64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 196 | *\windows8-10-32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 197 | *\kbdcap64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 198 | *\d3.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 199 | *\d.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 200 | *\b3.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 201 | *\2.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 202 | *\b1.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 203 | *\My.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 204 | *\Black.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 205 | *\WYProxy32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 206 | *\WYProxy64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 207 | *\Proxy64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 208 | *\ni.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 209 | *\d4.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 210 | *\d2.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 211 | *\t.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 212 | *\1.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 213 | *\cpupress.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 214 | *\gameink.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 215 | *\NetFlt.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 216 | *\ProtectS.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 217 | *\GameTerSafe.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 218 | *\Lurker.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 219 | *\TestBone.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 220 | *\Proxy32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 221 | *\t7.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 222 | *\nt4.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 223 | *\t8.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 224 | *\nstr.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 225 | *\nt6.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 226 | *\t3.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 227 | *\windows7-32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 228 | *\NetProxyDriver.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 229 | *\c.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 230 | *\b.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 231 | *\full.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 232 | *\WinIo64A.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 233 | *\WinIo64B.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 234 | *\WinIO32B.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 235 | *\WinIO32.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 236 | *\WinIO32A.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 237 | *\WinIo64C.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 238 | *\PCHunter.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 239 | *\aswArPot.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 240 | *\Bs_Def.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 241 | *\BS_RCIO.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 242 | *\IObitUnlocker.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 243 | *\LenovoDiagnosticsDriver.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 244 | *\Lv561av.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 245 | *\Monitor.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 246 | *\mydrivers.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 247 | *\PanIOx64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 248 | *\PanIO.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 249 | *\PanMonFltX64.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 250 | *\PanMonFlt.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |
| 251 | *\WiseUnlo.sys | https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules | TRUE |