#edr

AI

TH ThaiCySec

Onboard MDE ด้วย .EXE สำเร็จรูปตัวใหม่ ไฉไลกว่า Script เดิมมากกกก

สมัยก่อน เราจะต้อง Onboard เครื่องเอนด์พอยต์ในองค์กร เพื่อติดตั้ง Sensor เข้ากับ EDR อย่าง Microsoft Defender for Endpoint (MDE)…

Jul 26, 2026 · 5 min read · 0 claps #defender-for-endpoint #microsoft-defender-xdr #microsoft-purview

MDA AI

ST stillbigjosh

Purple Team Lab: Detection scenarios for Game Of Active Directory with Elastic EDR

Overview

Jul 13, 2026 · 25 min read · 0 claps #purple-teaming #red-teaming #edr

TCH AI

CE Century Solutions Group

How Century Solutions Group Assist Businesses in EDR Protection?

Century Solutions Group helps businesses strengthen their Endpoint Detection & Response (EDR) capabilities through a combination of…

Jun 16, 2026 · 2 min read · 0 claps #endpoint-security #defender-for-endpoint #edr

TCH BIO

AN Antivirusedition

Détection comportementale : comment on arrête un malware “inconnu”

Les malwares évoluent plus vite que jamais. Et dans le monde des PME/TPE, où chaque minute perdue coûte cher (arrêt de production, factures…

Jun 11, 2026 · 8 min read · 0 claps #edr #antivirus #cybersécurité

TCH MDA

JI Jishuzhain

What Makes a Good EDR Product? Reflections from Conversations with Practitioners

Over the past few weeks, I published several reflective essays on my blog. To my surprise, they received a decent amount of engagement. The…

Jun 06, 2026 · 4 min read · 0 claps #cybersecurity #edr #security-operations

LO Loveleen Binny

L1 Incident Investigation/Triage

Assign the detection

Jun 06, 2026 · 2 min read · 0 claps #investigation #triage #monitoring

TCH AI

AV Avigail Yagel

What Cloud-Based EDR Actually Does and What It Can’t Do Without You

Before you evaluate the best cloud-based EDR platforms, it helps to understand exactly where the tool ends and your process begins.

Jun 05, 2026 · 3 min read · 0 claps #edr #cybersecurity #cloud-security

HA Hasanzade Hasan

EDR XDR WAZUH AUDITD

Hər şeyin haradan başladığını anlamaq üçün kiçik bir tarixi təkamülə baxaq:

Jun 04, 2026 · 7 min read · 0 claps #edr #xdr #wazuh

AI BIO

AN Antivirusedition

Pourquoi un EDR est superflu dans une PME (et par quoi le remplacer intelligemment)

Dans la cybersécurité, il existe une tentation fréquente : acheter “l’outil le plus avancé” pour se sentir protégé. L’EDR (Endpoint…

Jun 04, 2026 · 6 min read · 0 claps #edr #endpoint-detection #endpoint-security

TCH

RA RAPATT

J’ai cassé root pour tester un EDR… et j’ai dû m’échapper par Docker

J’ai modifié un compte système critique pour tester la détection d’un EDR… et j’ai dû récupérer le serveur via Docker.

May 28, 2026 · 3 min read · 0 claps #edr #roots #docker

TCH

RA Raynard Waits

From the Field: ClickFix and the Process That Wasn’t

A ClickFix alert came in this week. I killed the flagged process within minutes, started cleanup, and that’s when the real incident…

May 27, 2026 · 2 min read · 50 claps #edr #soc-analyst #cybersecurity

AI TCH MKT GEN HUM

AG Agnidipta Sarkar

Why EDR-integrated Microsegmentation is triggering enterprises to swiftly embrace Breach Readiness.

Whenever I look back at last year, I feel we did not take things seriously.

May 26, 2026 · 5 min read · 1 claps #edr #microsegmentation #cybersecurity

TCH AI

PA Paddy Shewale

How Endpoint Detection & Response (EDR) Strengthens Cybersecurity

Introduction

May 26, 2026 · 2 min read · 0 claps #endpoint-detection #edr

TCH LIF AI

GA Gaming Techno Hub

2026 Cybersecurity Outlook Shows 68 Percent Growth in Enterprise Detection Efficiency Globally

Modern enterprise security environments are undergoing rapid transformation as organizations expand cloud adoption, hybrid work models, and…

May 26, 2026 · 2 min read · 0 claps #cybersecurity #enterprise-security #edr

TCH AI

CY Cyber Mark Security

EDR vs MDR vs XDR: Which Cybersecurity Solution Do You Really Need?

Cyber threats are evolving faster than ever. Ransomware, phishing, insider threats, and advanced persistent attacks are no longer rare…

May 22, 2026 · 2 min read · 0 claps #cybersecurity #edr #drm

YU Yunus Emre Pak

Developing a Process Tree Playbook That Provides EDR-Level Visibility in SIEM Products with SOAR

INTRODUCTION: The Difference Between SIEM and EDR

May 19, 2026 · 4 min read · 0 claps #process-tree #siem #edr

TCH AI

RO Robert Haas

Cybersecurity Simplified: Endpoint Detection and Response (EDR)

Over the past decade, rapid technological innovation has transformed the way businesses operate. Cloud computing, mobile workforces…

May 14, 2026 · 6 min read · 0 claps #cybersecurity #endpoint-detection #edr

AI TCH

NA Nazar Tymoshyk · UnderDefense

5 Attack Vectors Your EDR Is Blind To, And How AI SOC Covers Them

If you ran an attack-chain reconstruction on your last five confirmed incidents, how many of them actually started on an endpoint? Most…

Apr 29, 2026 · 6 min read · 204 claps #edr #ai-soc #agentic-soc

TCH LIF

OW Owais

Putting the “World’s Best EDR” to Sleep: A Journey Through Kernel Chaos 😴

Disclaimer ⚠️

Apr 13, 2026 · 14 min read · 5 claps #infosec #edr #defense-evasion

TCH BIO

CH Chamikanimnajith

Understanding EDR, NDR, XDR, and MDR: A Practical Guide for Modern Cybersecurity

Traditional security tools like antivirus and firewalls are no longer sufficient against modern attacks. Organizations now need detection…

Apr 07, 2026 · 3 min read · 0 claps #edr #ndr #xdr

AI

JE Jehad Abudagga

Reverse Engineering a 0day used Against CrowdStrike EDR

Hello again…

Apr 05, 2026 · 4 min read · 68 claps #byovd #edr #red-teaming

TCH

BI Birkankess · The Malware Files

HOW RELIABLE ARE THE LOGS? Part 2

Detection Engineering Series — Part 2 | Birkan KES | March 2026

Mar 17, 2026 · 10 min read · 5 claps #cybersecurity #siber-guvenlik #detection-engineering

WI Willian Lú

Detecção Imediata vs. Detecção Futura: O Custo Oculto de Priorizar Logs Brutos

Em ambientes MSSP ou em qualquer implementação de SIEM, a decisão sobre quais fontes de dados integrar raramente é simples. Orçamento…

Mar 16, 2026 · 8 min read · 6 claps #siem #qradar #google-secops

TCH

RI Ricardo Arroyo · Technology Hits

Demystifying the Alphabet Soup That Is Detection and Response

Tradeshow acronyms overwhelm meetings, derailing decisions. In Detection & Response all systems share one goal: quickly detect threats and…

Mar 09, 2026 · 7 min read · 5 claps #threat-detection #xdr #edr

AI

BE Berkay Sahin

Cyber Kill Chain, Dwell Time: EDR ve XDR Yaklaşımlarının Karşılaştırması

Modern siber saldırılar çoğu zaman tek bir adımda gerçekleşmez. Saldırganlar genellikle hedef sistemler hakkında bilgi toplar, uygun bir…

Mar 05, 2026 · 8 min read · 0 claps #cyber-kill-chain #endpoint-detection #dwell-time

VA varma penumatsa · AXIOMIO

Secure, Backup, and Protect — All in One with Acronis Cyber Protect Cloud

Introduction

Feb 25, 2026 · 2 min read · 0 claps #acronis #edr #dlp-solution

RO Rohit Sumbrui

AMSI Basics In Details

What is AMSI?

Feb 21, 2026 · 4 min read · 0 claps #amsi #edr #windows-defender

AL Ali Raza

EDR Detection & SOAR Response Lab — LimaCharlie × Tines × Slack

TL;DR

Feb 15, 2026 · 4 min read · 0 claps #soar #tine #slack

AI

SM İsmail KAYA

🔐 Endpoint Security (Uç Nokta Güvenliği)

Endpoint Security, bir kuruma ait ağa bağlanan tüm uç nokta cihazlarını hedef alan tehditlere karşı koruma sağlamayı amaçlar. Günümüzde…

Feb 07, 2026 · 4 min read · 0 claps #endpoint-security #endpoint-protection #epp

TCH MKT

BE Beyza Sıla Gökmen

Process Tree Yapısı Nedir? EDR Sistemlerinde Ne Amaçla Kullanılır?

Günümüzde siber güvenlik tehditlerinin giderek karmaşık hale gelmesiyle birlikte, olayların sistem düzeyinde nasıl gerçekleştiğini anlamak…

Jan 15, 2026 · 3 min read · 13 claps #cybersecurity #edr #process-tree

PE Pentest Team @greenhats.com

When Delete Fails: Weaponizing ISOs to Defeat EDR Remediation

In the realm of advanced Windows exploitation and kernel interactions, the ‘Bring Your Own Vulnerable Driver’ (BYOVD) technique remains a…

Dec 05, 2025 · 3 min read · 0 claps #xdr #edr #kernel-driver

YU Yunus Emre Pak

SIEM Ürünlerinde SOAR ile Process Tree Playbook’u…

GİRİŞ: SIEM ile EDR Farkı

Dec 02, 2025 · 3 min read · 0 claps #process-tree #siem #edr

TCH

GY Gyanendar Manohar

The End of the Sysmon Driver: How Native Windows Integration Will Revolutionize EDR

The cybersecurity landscape is constantly evolving, and the tools we use to defend our networks must evolve with it. For years, Sysmon…

Nov 26, 2025 · 6 min read · 2 claps #sysmon #edr #windows-11

TCH SCI

NI Nishanth Padmanabhan

Singularity Rootkit: How a Linux Kernel Backdoor Evaded Elastic Security

Recent security research by MatheuZ (MatheuZSecurity) has revealed a highly engineered Linux rootkit capable of evading Elastic Security’s…

Nov 02, 2025 · 3 min read · 0 claps #elastic-security #cybersecurity #edr

TCH

ZA Zanebilal

Bypassing ETW via Session Hijacking:

In the past article ( you can find it here: https://medium.com/@zanebilal6/evading-etw-techniques-written-in-c-d8875e7385b9) , we have…

Oct 19, 2025 · 7 min read · 0 claps #etw #windows-internals #malware-analysis

TCH

SU Suhailmalik

Cybersecurity SOAR EDR Project

Automated workflow to isolate an infected machine.

Sep 12, 2025 · 15 min read · 1 claps #limacharlie #tine #edr

TCH

JE Jehad Abudagga

Researching an APT Attack and Weaponizing It

How I turned an APT’s tool into my own.

Sep 11, 2025 · 6 min read · 88 claps #edr #defense-evasion #byovd

AI TCH

YA Yaniv

Limacharlie Claude MCP Workbench

TL;DR: A technical workbench connecting claude to limacharlie via mcp for interactive edr queries and scripted investigation workflows.

Sep 04, 2025 · 1 min read · 3 claps paywalled #limacharlie #claude-mcp #nodejs

AI BIO

YA Yash Lakeshri

Modern Techniques Used by Threat Actors to Disable & Bypass Security Solutions

In modern threat landscapes, Endpoint Detection and Response (EDR) platforms represent a critical layer of defense against targeted…

Aug 13, 2025 · 8 min read · 1 claps #edr #cyber-security-solutions #antivirus

TCH

FA Fatih UYSAL

SOC’un Mimarları: SIEM, SOAR, EDR, XDR ve Ötesi

Tehdit Algılamadan Otomatik Müdahaleye: Modern Siber Güvenlik İstifini (Security Stack) Anlamak.

Jul 29, 2025 · 2 min read · 0 claps #siem #soar #edr

TCH

AL Alfonso Izquierdo

SOAR EDR Lab: Automating Incident Response

Cybersecurity Project Series (IV)

Jul 07, 2025 · 16 min read · 0 claps #edr #limacharlie #soar

AD Adnan Kutay Yüksel

LetsDefend Threat Hunting Tools WriteUp Rehberi

📌 Merhaba Siber Güvenlik Meraklıları

Jun 05, 2025 · 3 min read · 0 claps #tehdit-avcılığı #letsdefendio #edr

GR graciegue

SOAR & EDR Project: LimaCharlie and LaZagne

Introduction

May 27, 2025 · 5 min read · 0 claps #limacharlie #tine #lazagne

BIO TCH SOC LIF

CY CyCraft Technology Corp · CyCraft

Hospital Data Breach: A Wake-Up Call for Visibility, Compliance, and Resilience

Data breaches in healthcare and biotech now result in operational, legal, and reputational damage with long-term consequences for business…

May 22, 2025 · 6 min read · 0 claps #ai-security #hospital-data-breach #edr

TCH

AL Alex Macenas

LimaCharlie — Staging the attack

At Windows machine create a folder that only administrator can access it:

Mar 19, 2025 · 2 min read · 0 claps #edr #cybersecurity #limacharlie

TCH

AL Alex Macenas

LimaCharlie

Introduction

Mar 19, 2025 · 2 min read · 0 claps #limacharlie #edr #cybersecurity

TCH AI

ME me

Deploying Ransomware: SentinelOne and Microsoft Defender Analysis

Did Someone Say Ransomware?

May 07, 2024 · 1 min read · 0 claps #cybersecurity #red-team #edr

LE LetMeDayDream

Know EDR before evasion (1)

Unveiling the Mechanics of EDR — A Prelude to Masterful Evasion and Investigation

Mar 04, 2024 · 9 min read · 0 claps #edr #windows-api-hooking #event-logs

SCI

KA Kanishdankani

External data representation and marshaling

External Data Representation

Jul 30, 2020 · 4 min read · 0 claps #marshalling #edr #corba