4 ms·
I am not defending CrowdStrike here (my work laptop, that I am typing this on, is molasse-like thanks to them), but their PSIRT team (they have one right?) is j
by guardiangod 4y ago
I am not defending CrowdStrike here (my work laptop, that I am typing this on, is molasse-like thanks to them), but their PSIRT team (they have one right?) is just another team in the corp machinery. What PSIRT team and the engine team decide to respond have no effect on what the analyst team decides to do.
Do no harm and cover your ass. No one is going to complain a false positive on a custom PoC binary....right?
Everything else, yeah those are pretty shitty.
- ImPostingOnHN 4y agoyou're dancing around the issue though, which is crowdstrike lying in saying there's no vulnerability when they clearly tested it and found there was one
- guardiangod 4y agoI didn't address anything except for the quoted line from the blog post, which is the binary PoC detection part. From the blog post- >The PoC that has been sent to CrowdStrike was flagged as malicious. The msiexec call of the deinstaller was also flagged as malicious. Everything else I have no opinion I wish to share. There are many posters in this thread that would satisfy your desire to engage on the other issues.
- dont__panic 4y agoSeriously, what does CrowdStrike Falcon do to slow down work computers so much? I recently switched gigs and no longer use Crowdstrike, and I didn't realize just how bad it was until I no longer had to deal with it. I've heard there are workarounds to disable or remove CrowdStrike, but I was too concerned that the IT overlords would come after me at my previous employer.