https://orbitbrain.com/blog/blackbyte-ransomware-abuses-legitimate-driver-to-disable-security-protections/
BlackByte Ransomware Abuses Legitimate Driver to Disable Security Protections