Vendor
Guidance Software
- First Reported
- Feb 4, 2026
- Latest Reported
- Feb 4, 2026
Reported Context (1)
- Once inside, the attacker deployed an EDR killer that abuses a legitimate Guidance Software (EnCase) forensic driver with a revoked certificate to terminate security processes from kernel mode, a technique known as Huntress Details SonicWall VPN Intrusion and EnCase Driver Used to Target Security Tools
MITRE ATT&CK (8)
Vendors (2)
Products (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.