3 ms·
Sure, storage. Networking though? SIEMs receive and send data unencrypted? They should not. By sending the data in plain text you open up an attack surface to a
by Fnoord 2y ago
Sure, storage. Networking though? SIEMs receive and send data unencrypted? They should not. By sending the data in plain text you open up an attack surface to anyone sniffing the network.
- notepad0x90 2y agoCrowdstrike like many EDRs uses mutually authenticated TLS to send the data over the network to their cloud.
- Fnoord 2y agoOP said: > Found out that the CrowdStrike Mac agent (Falcon) sends all your secrets from environment variables to their cloud hosted SIEM. In plain text. So this person claims the data isn't send using TLS. I didn't verify the claim myself though.