EDR Vendor Evaluation Guide: Comparing Detection, Prevention, and Response Capabilities

Key Takeaways An evaluation of the EDR vendors should not be done on the number of features, but on a vendor's ability to detect, prevent and respond. Using behavioral detection, malicious activity such as PowerShell activity, access to credentials, privilege escalation, lateral movement, and persistence can be detected. It is significant because... Weiterlesen: EDR Vendor Evaluation Guide: Comparing Detection, Prevention, and Res…