Technique T1036
Masquerading
Detection & mitigation
Monitor for suspicious processes spawned by driver installation, unexpected network connections from driver-related processes, and use endpoint detection to identify known Asruex indicators. Ensure drivers are obtained from trusted sources and verify digital signatures.