Analysis of BlueHammer: LPE Exploiting Windows Defender Updates  | Fortra

https://www.coresecurity.com/blog/analysis-bluehammer-lpe-exploiting-windows-defender-updates