March 4

Webinar Takeaway: Your Free and Open Source EDR Options!

0  comments

My key takeaways

  • carbon black was one of the first vendors as "black box flight recorder"
  • mitr uses cobalt strike and power… to simulate attacks
  • Good comparison: https://attackevals.mitre-engenuity.org/enterprise/evaluations.html?round=APT29
  • container security: Wazuh can inspect docker containers, carbon black was working with VMware, not docker or kubernetes
  • to start a hunt in velociraptor, hit the play button

Env

additional links


Tags

EDR


You may also like

Webinar takeaway – Shellcode Execution with Python

Webinar takeaway – Shellcode Execution with Python

Why your security team needs more than just tech skills

Why your security team needs more than just tech skills
{"email":"Email address invalid","url":"Website address invalid","required":"Required field missing"}