EnCase Driver Weaponized as EDR Killers Persist
Dark Reading
by Rob WrightFebruary 5, 2026
The forensic tool's driver was signed with a digital certificate that expired years ago, but major security gaps allowed Windows to load it.
Verticals
securitytech
Originally published on Dark Reading on 2/5/2026