CrowdStrike blue screen issue
ID: b5e24fbd-759d-5050-91b3-79a3e869a9be
STIX ID: report--b5e24fbd-759d-5050-91b3-79a3e869a9be
Feed Name: ThreatLocker Blog
ThreatLocker reports a widespread issue where a faulty CrowdStrike driver file caused Windows BSODs starting July 19 and outlines immediate remediation: boot to Recovery/Safe Mode and delete the problematic C:\Windows\System32\drivers\CrowdStrike\C-00000291*.sys. The company provides a community policy to block reads/writes to the file, suggests a cautious temporary deny policy for CrowdStrike if needed, and offers support (including MDR on request) to assist with file removal; updates will follow as more information becomes available.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
