> implementing this because of a business case not a technical case there are some certification requirements to do pentests/red teaming and then those securit

> implementing this because of a business case not a technical case there are some certification requirements to do pentests/red teaming and then those security folk will all tell them to install an EDR so they picked crowdstrike, but the security people have a very valid technical case for that recommendation. it doesn't shift liability to crowdstrike, thats not how this works. In this specific case they are very likely liable due to gross negligence, but that is different