Tagged: EDR
2 posts · browse all tags
-
Host-Based Detection Part 9: Alternatives, and Handing Off to the Blue Team
OSSEC, Sysmon, auditd, osquery, Falco, and commercial EDR, compared honestly against Wazuh. Then a straight list of what the next series still has to do, now that a real domain controller and two real managers exist to test it against.
-
Metasploit Deep Dive Part 9: Evasion in 2026, Honestly Assessed
What encoders, the dedicated evasion module category, and Metasploit 6.5's new features do and don't buy against modern AV and EDR, without recycling the 2015 version of this advice.