Get Demo
Kernel driver ProcessMonitorDriver.sys in Safeticas endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected system processes.