Add a new threat actor to the list, those pesky parameter counts actively trying to evade detection: "This parameter count mismatch evaded multiple layers of b

Add a new threat actor to the list, those pesky parameter counts actively trying to evade detection: "This parameter count mismatch evaded multiple layers of build validation and testing, as it was not discovered during the sensor release testing process, the Template Type (using a test Template Instance) stress testing or the first several successful deployments of IPC Template Instances in the field." Curious that csagent.sys isn't mentioned until last page, p. 12: "csagent.sys is CrowdStrike’s file system filter driver, a type of kernel driver that registers with components of the Windows operating system…"