Countering EDRs With The Backing Of Protected Process Light (PPL)
www.zerosalarium.com
Abusing the Clipup.exe program by using the CreateProcessAsPPL.exe tool to destroy the executable file of the EDRs, Antivirus.