3 ms·
Crowdstrike like many EDRs uses mutually authenticated TLS to send the data over the network to their cloud.
by notepad0x90 2y ago
Crowdstrike like many EDRs uses mutually authenticated TLS to send the data over the network to their cloud.
- Fnoord 2y agoOP said: > Found out that the CrowdStrike Mac agent (Falcon) sends all your secrets from environment variables to their cloud hosted SIEM. In plain text. So this person claims the data isn't send using TLS. I didn't verify the claim myself though.