Defense Evasion Techniques Detected by AhnLab EDR

**AhnLab analysis of defense-evasion tools:** This report documents how threat actors leverage legitimate tools (Defender Control, HRSword, Process Hacker, GMER) to disable endpoint security during intrusions, cites observed usage by ransomware groups and APTs (e.g., LockBit, Ryuk, Mimic, Lapsus$), and details how AhnLab EDR detects these behaviors to enable early warning, investigation, and response.