Back to Threat Summit overview
BYOVDDetection Engineering
BYOVD: The Trust Model Is Broken
Alex Necula
Threat Summit 2026 · Session recording
About this session
Microsoft signs the driver. Windows trusts it. The EDR trusts it. This session explores how attackers weaponize that chain of trust through Bring-Your-Own-Vulnerable-Driver techniques.
Speaker
Alex Necula
Alex is a Senior Security Engineer working across red-team research, detection engineering, adversary simulation, threat intelligence, and malware analysis.