March 4

Webinar Takeaway: Your Free and Open Source EDR Options!

Security

0  comments

My key takeaways

  • carbon black was one of the first vendors as "black box flight recorder"
  • mitr uses cobalt strike and power... to simulate attacks
  • Good comparison: https://attackevals.mitre-engenuity.org/enterprise/evaluations.html?round=APT29
  • container security: Wazuh can inspect docker containers, carbon black was working with VMware, not docker or kubernetes
  • to start a hunt in velociraptor, hit the play button

Env

additional links

Tags

EDR

You may also like

Lessons from Sun Tzu’s “The Art of War” in Cybersecurity: Timeless Wisdom or Outdated Tactics?

Introduction Sun Tzu’s "The Art of War" is a legendary strategic treatise written more than 2,500 years ago. Its enduring principles of warfare strategy have transcended military boundaries, influencing disciplines from business management to competitive sports. In today’s digital age, its relevance is increasingly apparent in the cybersecurity landscape, particularly for CISOs of medium-sized enterprises,

Read More

Ransomware Resilience Starts in the Mind: Overcoming Cognitive Biases and Decision-Making Errors in Cybersecurity

Why We Keep Losing Despite Stronger Security Controls Over the past three years, businesses have almost doubled their confidence in cybersecurity—rising from 32% in 2021 to 54% in 2024 (The Global Cost of Ransomware Study, 2025). Despite this, ransomware’s impact has only grown: 40% of affected companies suffered significant revenue losses, 58% experienced operational downtime,

Read More
Leave a Comment