Driver Exploitation for Offensive Operators (Jake Mayhew)

Windows kernel and driver exploitation is more relevant than ever in 2025, with attackers targeting the inner core of the Windows OS to dismantle modern endpoint controls such as EDR/XDR. In this talk, we will demystify the art of kernel driver bugs and exploits. Learn about exploit primitives, mitigations, and post-exploitation goals that attackers are resorting to more and more as endpoint security matures.