Security researchers have demonstrated how Microsoft Defender’s legitimate Boot-Time Removal driver, BTR.sys, can be ...