Visibility with EDR/MDR is still important, 'the basics' are impossible, and the news - Rob Allen - ESW #460

Interview with Rob Allen from Threatlocker

This week, Rob Allen from Threatlocker is with us to discuss the importance of EDR and MDR visibility. We discuss some real world attacks and anecdotes where EDR was able to save the day when threats were missed by other controls.

Topic: Do the basics, they said. Easier said than done.

Guillaume and Adrian discuss the futility of attempting to do all the foundational work standards, best practices, and regulations expect of organizations. Adrian has given up. Fortunately, Guillaume has some excellent advice and hope to share on this front.

The weekly enterprise news

Finally, in the enterprise security news,

1. a really interesting vibe check
2. funding
3. acquisitions
4. the verizon DBIR
5. we give a tutorial on how to leak AWS keys on github
6. OH NEVERMIND, SOMEONE AT CISA ALREADY MADE THE TUTORIAL
7. agents versus agents
8. exploitbench
9. the vulnpocalypse
10. robot dogs are SO EASY to take out, we don't need to be too scared of them yet

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-460