Tool
EDRSilencer
- First Reported
- Nov 18, 2024
- Latest Reported
- May 18, 2026
Reported Context (3)
- but it's effectively "silenced" and can't send any telemetry or alerts. Tools like EDRSandblast and EDRSilencer allow attackers to easily abuse Windows Firewall as part of their defense-evasion tradecraft. How Attackers Disable AV and EDR—and How to Defend Against It
- These tools are developed by closed ransomware groups, proof-of-concept forkers, and marketplace sellers and include examples such as DemoKiller, EDRSilencer, and the Reynolds ransomware. Analysis Finds 54 EDR Killers Using 34 Vulnerable Drivers to Disable Security
- Many reading this blog have likely heard of EDRSilencer. How EDR Products Can Counter Firewall and WFP Tampering
Malware (1)
People (2)
Threat Actors (2)
MITRE ATT&CK (5)
Vendors (3)
Products (7)
Tools (11)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.