2 ms·
This is the key question for me: is there a way to get [most of] the security benefits of EDR without giving away the keys to the kingdom.
by apitman 2y ago
This is the key question for me: is there a way to get [most of] the security benefits of EDR without giving away the keys to the kingdom.
- lucasRW 2y agoNo. If an EDR relies on userland mechanisms to monitor, these userland mechanisms can easily be removed by the malicious process too.