https://orbitbrain.com/blog/security-firms-warn-microsoft-of-signed-drivers-used-to-kill-edr-av-processes/