From d544a9fbb18a31e81c82a6407e5a166d268ab56d Mon Sep 17 00:00:00 2001
From: netero1010 <netero1010@netero1010-securitylab.com>
Date: Sat, 30 Dec 2023 19:07:02 +0800
Subject: [PATCH] Added more EDR solutions (e.g., CrowdStrike, Carbon Black) to
 the list

---
 EDRSilencer.c | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/EDRSilencer.c b/EDRSilencer.c
index c748921..1e5a730 100644
--- a/EDRSilencer.c
+++ b/EDRSilencer.c
@@ -4,6 +4,10 @@ char* edrProcess[] = {
 // Microsoft Defender for Endpoint and Microsoft Defender Antivirus
     "MsMpEng.exe",
     "MsSense.exe",
+    "SenseIR.exe",
+    "SenseNdr.exe",
+    "SenseCncProxy.exe",
+    "SenseSampleUploader.exe",
 // Elastic EDR
     "elastic-agent.exe",
     "elastic-endpoint.exe",
@@ -12,6 +16,45 @@ char* edrProcess[] = {
     "xagt.exe",
 // Qualys EDR
     "QualysAgent.exe",
+// CrowdStrike
+    "CSFalconService.exe",
+    "CSFalconContainer.exe",
+// SentinelOne
+    "SentinelAgent.exe",
+    "SentinelAgentWorker.exe",
+    "SentinelServiceHost.exe",
+    "SentinelStaticEngine.exe",  
+    "LogProcessorService.exe",
+    "SentinelStaticEngineScanner.exe",
+    "SentinelHelperService.exe",
+    "SentinelBrowserNativeHost.exe",
+// Cylance
+    "CylanceSvc.exe",
+// Cybereason
+    "AmSvc.exe",
+    "CrAmTray.exe",
+    "CrsSvc.exe",
+    "ExecutionPreventionSvc.exe",
+    "CybereasonAV.exe",
+// Carbon Black EDR
+    "cb.exe",
+// Carbon Black Cloud
+    "RepMgr.exe",
+    "RepUtils.exe",
+    "RepUx.exe",
+    "RepWAV.exe",
+    "RepWSC.exe",
+// Tanium
+    "TaniumClient.exe",
+    "TaniumCX.exe",
+    "TaniumDetectEngine.exe",
+// Palo Alto Networks Traps/Cortex XDR
+    "Traps.exe",
+    "cyserver.exe",
+    "CyveraService.exe",
+    "CyvrFsFlt.exe",
+// FortiEDR
+    "fortiedr.exe"
 };
 
 BOOL inWfpFlag[sizeof(edrProcess) / sizeof(edrProcess[0])] = { FALSE };