Skip to content
securitytabs

Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry

SentinelOne BlogEndpoint

Bring your own vulnerable driver (BYOVD) is having a moment in endpoint security. Some of the buzz is earned. Some of it is overblown. This series unpacks both and shows the evidence for each. This piece traces how the technique scaled into an industry. Ransomware actors successfully disabled security tools in about 48% of intrusions in 2024.

Summary from SentinelOne Blog.

Explained

The technology and terms in this story. Learn more

More in Endpoint