Sometimes stock image choices are hard, OK?
Microsoft
Microsoft to nudge EDR out of the kernel
Currently antivirus firms use a range of Windows kernel drivers to do things like intercept network and file process activity
