A new cyberattack technique has emerged, enabling attackers to bypass Endpoint Detection and Response (EDR) systems while operating under a low-privileged standard user account.

Traditionally, EDR evasion requires elevated privileges, such as administrative or system-level access.