March 4

Webinar Takeaway: Your Free and Open Source EDR Options!

0  comments

My key takeaways

  • carbon black was one of the first vendors as "black box flight recorder"
  • mitr uses cobalt strike and power... to simulate attacks
  • Good comparison: https://attackevals.mitre-engenuity.org/enterprise/evaluations.html?round=APT29
  • container security: Wazuh can inspect docker containers, carbon black was working with VMware, not docker or kubernetes
  • to start a hunt in velociraptor, hit the play button

Env

additional links


Tags

EDR


You may also like

Boosting Cybersecurity in German SMEs with Gamification and Serious Play

TL;DR Gamified cybersecurity training offers an engaging and effective way to improve security awareness and practices within German SMEs. The ALARM Information Security project demonstrates the success of integrating gamification into training, enhancing retention and understanding of cybersecurity principles. By leveraging customized game scenarios, regular workshops, and participatory feedback loops, SMEs can bolster their cybersecurity

Read More

Unlock Effective Cybersecurity: Simplify Policies with the Clarity of the OSI Model

TL;DR Diving into the essence of effective cybersecurity, this article shines a light on the transformative power of simplifying policy language, inspired by the OSI model’s structured communication layers. It goes beyond theoretical insights, offering actionable strategies for CISOs to demystify complex jargon and make cybersecurity policies accessible and engaging for every team member. Highlighting

Read More