They Got In Through SonicWall. Then They Tried to Kill Every Security Tool

Threat actors exploited SonicWall SSLVPN credentials to breach a network and deploy a sophisticated EDR killer using a legitimate but revoked forensic driver, illustrating how attackers are increasingly abusing trusted signed drivers to disable security tools and pave the way for ransomware.