Rootkit detector whose driver is abused to kill EDR processes (BYOVD).
Read the full analysis on IntelFusions