Re:Initial details about why CrowdStrike's CSAgent.sys crashed
by suzzer99 on Sunday July 21, 2024 @01:54PM
(#41026763)
Yeah one of the major problems seems to be CrowdStrike's assumptions that channel files are benign. Which isn't true if there's a bug in your code that only gets triggered by the right virus definition.
I don't know how you could assert that this is impossible, hence channel files should be treated as code.
I don't know how you could assert that this is impossible, hence channel files should be treated as code.