🧰 EDRSandblast

The items that name it 2

• Threat Actor Defense Evasion: How Attackers Disable AV & EDR
  writeup2026-05-18

  Attacker tool used to abuse Windows Firewall rules to block EDR agent communications

• EDR: The Great Escape - RomHack Training Review
  writeup2024-09-30

  Tool written in C that weaponizes a vulnerable signed driver to bypass EDR detections (Notify Routine callbacks, Object Callbacks, ETW TI provider) and LSASS protections