GreatXML

GreatXML Exploit Bypasses BitLocker by Abusing WinRE XML Files

Defender offline-scan artifacts allow an attacker who can write two files to the recovery partition to gain SYSTEM access and risk BitLocker decryption.