Search notes:
Registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Parameters
ServiceDll
According to
mr.d0x
, randomly renaming the value of this key disables Cortex XDR.
ServiceDllUnloadOnStop
ServiceMain
Index