4 ms·
EBPF is a good direction although I'm not sure what the maturity of the Windows fork is right now, and how many kernel apis are enabled in it - i.e. how far awa
by waihtis 2y ago
EBPF is a good direction although I'm not sure what the maturity of the Windows fork is right now, and how many kernel apis are enabled in it - i.e. how far away are we from having enough capability to run an EDR in it