Elastic Defend automatically generates and instantly deploys vulnerable driver YARA rules from VirusTotal, LOLDrivers and Microsoft's blocklist, closing the gap BYOVD attacks depend on. Plus a new troubleshooting skill and ARM endpoint protection.

What is a BYOVD attack and how does it bypass endpoint protection?

How Elastic automatically generates vulnerable driver YARA rules

Automatic endpoint troubleshooting in Elastic Agent Builder, now available as a skill

Windows on ARM: Elastic Defend coverage for Snapdragon and Copilot+ PCs

Get started with Elastic Security today

Elastic Defend now ships vulnerable driver YARA rules continuously, closing the timing gap BYOVD attacks exploit to disable endpoint protection.

Author

Pedro Jaramillo

Articles

What's new in Elastic Defend: 800+ vulnerable driver rules, automated troubleshooting, and ARM support