by TwoSevenOneT · Agent Tool · ★ 220
EDRChoker EDRChoker uses Policy-based Quality of Service (QoS) to set hard bandwidth caps (throttling) on Endpoint Detection and Response (EDR) agents, causing them to always time out - effectively blocking them. The rules take effect immediately and persist after the target reboots Windows. EDRChoker relies on Windows' pacer.sys driver.
| Stars | 220 |
| Forks | 41 |
| Language | C# |
| Category | Agent Tool |
| Quality Score | 51.8405217660566/100 |
| Last Updated | 2026-06-13 |
| Created | 2026-06-07 |
| Platforms | dotnet |
| Est. Tokens | ~2k |
Explore other popular agent tool tools:
EDRChoker is A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.. It is categorized as a Agent Tool with 220 GitHub stars.
EDRChoker is primarily written in C#.
You can find installation instructions and usage details in the EDRChoker GitHub repository at github.com/TwoSevenOneT/EDRChoker. The project has 220 stars and 41 forks, indicating an active community.