Stopping attackers who want your endpoint protection to go darkhttps://www.sophos.com/en-us/blog/sophos-endpoint-edr-killers
EDR Killers let attackers blind endpoint protection before the real attack begins, and Sophos Endpoint stops them with several layers that are on by default.