# Killing me gently: Inside Gentlemen's EDR killer framework

DevFeed: [Killing me gently: Inside Gentlemen's EDR killer framework](<https://devfeed.tech/articles/killing-me-gently-inside-gentlemen-s-edr-killer-framework-8373.md>)

Original publisher: [Read original article](<https://www.welivesecurity.com/en/eset-research/killing-me-gently-inside-gentlemens-edr-killer-framework/>)

Author: Jakub Souček

Published: 2026-06-18T09:46:32Z

Content type: article

Language: en

Sources: [WeLiveSecurity](<https://devfeed.tech/sources/welivesecurity.md>)

Topics: [ESET research](<https://devfeed.tech/topics/eset-research.md>), [Endpoint Security & XDR](<https://devfeed.tech/topics/endpoint-security-xdr.md>), [ransomware](<https://devfeed.tech/topics/ransomware.md>), [Security](<https://devfeed.tech/topics/security.md>), [Cybercrime](<https://devfeed.tech/topics/cybercrime.md>), [Software](<https://devfeed.tech/topics/software.md>)

Tags: [analysis](<https://devfeed.tech/tags/analysis.md>), [eset-research](<https://devfeed.tech/tags/eset-research.md>), [europe](<https://devfeed.tech/tags/europe.md>), [insights](<https://devfeed.tech/tags/insights.md>), [ransomware](<https://devfeed.tech/tags/ransomware.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [software](<https://devfeed.tech/tags/software.md>), [southeast-asia](<https://devfeed.tech/tags/southeast-asia.md>), [techniques](<https://devfeed.tech/tags/techniques.md>)

## AI overview

ESET Research analyzes Gentlemen's ransomware-as-a-service operation and its portfolio of EDR-killing tools. The article examines the in-house GentleKiller framework, third-party tools, shared defense-evasion techniques, and the group's rapid adoption of BYOVD exploits, using incident-level visibility and leaked internal data.

## Source excerpt

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen