James Forshaw :donor:@GossiTheDog creative for sure, but I wonder if there's not other places that could force a process to suspend at least if you already have admin access. Ultimately EDR lives and dies by it's ability to catch the malware before it disables the EDR. Not sure how MS would fix this in the OS.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.