My deep-dive technical analysis of a zero-day exploit being used by The Gentlemen ransomware group to disable EDR products https://expel.com/blog/not-very-gentlemanly-analyzing-a-zero-day-exploit-used-by-the-gentlemen-ransomware-to-disable-targets-edrs/