Ask your older coworkers what they did before EDR and SIEM
January 8, 2024 at 12:27 AM
Ask your older coworkers what they did before EDR and SIEM
“.. Within about three minutes of the crash, the Model S uploaded a “collision snapshot”—video, CAN‑bus streams, EDR data, etc.—to Tesla’s servers .. The vehicle then deleted its local copy, resulting in Tesla being the only entity having access.”
@electrek.co $TSLA
electrek.co/2025/08/04/t...
@electrek.co $TSLA
electrek.co/2025/08/04/t...
August 4, 2025 at 4:18 PM
“.. Within about three minutes of the crash, the Model S uploaded a “collision snapshot”—video, CAN‑bus streams, EDR data, etc.—to Tesla’s servers .. The vehicle then deleted its local copy, resulting in Tesla being the only entity having access.”
@electrek.co $TSLA
electrek.co/2025/08/04/t...
@electrek.co $TSLA
electrek.co/2025/08/04/t...
You really should read this article on how criminal groups routinely bypass EDR. This isn’t state stuff. I see it all the time, and have for a while. The sad truth is EDR is one rung in defense in depth and it surviving tampering is a perpetual cat mouse game. www.theregister.com/2025/08/14/e...
Ransomware crews don't care about your EDR
: Some custom malware, some legit software tools
www.theregister.com
August 16, 2025 at 11:52 AM
You really should read this article on how criminal groups routinely bypass EDR. This isn’t state stuff. I see it all the time, and have for a while. The sad truth is EDR is one rung in defense in depth and it surviving tampering is a perpetual cat mouse game. www.theregister.com/2025/08/14/e...
[NEW BLOG]
EDR Silencer and Beyond: Exploring Methods to Block EDR Communication - Part 2
In collaboration with
@fabian.bader.cloud
academy.bluraven.io/blog/edr-sil...
#redteam
EDR Silencer and Beyond: Exploring Methods to Block EDR Communication - Part 2
In collaboration with
@fabian.bader.cloud
academy.bluraven.io/blog/edr-sil...
#redteam
EDR Silencer and Beyond: Exploring Methods to Block EDR Communication - Part 2
Alternative methods for EDR Silencers for blocking EDR communication to disable defenses.
academy.bluraven.io
December 1, 2024 at 5:32 PM
[NEW BLOG]
EDR Silencer and Beyond: Exploring Methods to Block EDR Communication - Part 2
In collaboration with
@fabian.bader.cloud
academy.bluraven.io/blog/edr-sil...
#redteam
EDR Silencer and Beyond: Exploring Methods to Block EDR Communication - Part 2
In collaboration with
@fabian.bader.cloud
academy.bluraven.io/blog/edr-sil...
#redteam
March 18, 2025 at 10:43 PM
EXCLU 🔴 Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie ⤵️
🖋️ @paulinemigevant.bsky.social et @hugoboursier.bsky.social
buff.ly/aDhRkcF
🖋️ @paulinemigevant.bsky.social et @hugoboursier.bsky.social
buff.ly/aDhRkcF
Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie
Politis révèle pourquoi le gouvernement veut dissoudre Génération EDR. Le collectif antiraciste est accusé de liens avec l’organisation antifasciste la Jeune Garde, dissoute. Les militants de cette…
www.politis.fr
April 3, 2026 at 11:21 AM
EXCLU 🔴 Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie ⤵️
🖋️ @paulinemigevant.bsky.social et @hugoboursier.bsky.social
buff.ly/aDhRkcF
🖋️ @paulinemigevant.bsky.social et @hugoboursier.bsky.social
buff.ly/aDhRkcF
EDR Evasion: Process Injection Without WriteProcessMemory
EDR Evasion: Process Injection Without WriteProcessMemory
www.zerosalarium.com
September 27, 2026 at 4:09 AM
EDR Evasion: Process Injection Without WriteProcessMemory
UAT-10147: KI-gestützter Angriff setzt SPECTRE ein und umgeht EDR auf Windows und Linux
www.it-boltwise.de/uat-10147-ki...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Windows #SPECTRE #EDR
www.it-boltwise.de/uat-10147-ki...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Windows #SPECTRE #EDR
UAT-10147: KI-gestützter Angriff setzt SPECTRE ein und umgeht EDR auf Windows und Linux
UAT-10147 nutzt KI-gestützte Tools und den plattformübergreifenden Backdoor SPECTRE, um Webserver anzugreifen und EDR-Sichtbarkeit unter Windows wie Linux gezielt auszuschalten. Details zu DeepAudit, ...
www.it-boltwise.de
August 24, 2026 at 1:58 PM
UAT-10147: KI-gestützter Angriff setzt SPECTRE ein und umgeht EDR auf Windows und Linux
www.it-boltwise.de/uat-10147-ki...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Windows #SPECTRE #EDR
www.it-boltwise.de/uat-10147-ki...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Windows #SPECTRE #EDR
Ships also get nose jobs (EDR shipyard Antwerp)
April 14, 2026 at 4:53 PM
Ships also get nose jobs (EDR shipyard Antwerp)
I've been discussing this in tabletop exercises with clients. How will you handle a threat actor encrypting files exposed through file shares when it's done over the network from an unmanaged device?
EDR is NOT the answer here.
www.bleepingcomputer.com/news/securit...
EDR is NOT the answer here.
www.bleepingcomputer.com/news/securit...
Ransomware gang encrypted network from a webcam to bypass EDR
The Akira ransomware gang was spotted using an unsecured webcam to launch encryption attacks on a victim's network, effectively circumventing Endpoint Detection and Response (EDR), which was blocking ...
www.bleepingcomputer.com
March 7, 2025 at 1:35 PM
I've been discussing this in tabletop exercises with clients. How will you handle a threat actor encrypting files exposed through file shares when it's done over the network from an unmanaged device?
EDR is NOT the answer here.
www.bleepingcomputer.com/news/securit...
EDR is NOT the answer here.
www.bleepingcomputer.com/news/securit...
I get a lot of confused and angry teams when I inject EDR disablement into IR tabletop exercises. But it’s something I see in real life every week. You need to monitor for agent crashes and fall off. You can’t rely on EDR as a lone panacea for defense and forensics.
August 16, 2025 at 11:52 AM
I get a lot of confused and angry teams when I inject EDR disablement into IR tabletop exercises. But it’s something I see in real life every week. You need to monitor for agent crashes and fall off. You can’t rely on EDR as a lone panacea for defense and forensics.
IBM X-Force's Logan Goins has released Krueger, a .NET tool for remotely killing EDR using the Windows Defender Application Control (WDAC) utility
github.com/logangoins/K...
github.com/logangoins/K...
GitHub - logangoins/Krueger: Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC - logangoins/Krueger
github.com
December 26, 2024 at 1:46 PM
IBM X-Force's Logan Goins has released Krueger, a .NET tool for remotely killing EDR using the Windows Defender Application Control (WDAC) utility
github.com/logangoins/K...
github.com/logangoins/K...
March 10, 2026 at 9:47 PM
Ok... which EDR did it this time?
August 7, 2025 at 1:26 AM
Ok... which EDR did it this time?
Trying to get EDR-level coverage with a DIY Sysmon install...
November 5, 2024 at 4:34 PM
Trying to get EDR-level coverage with a DIY Sysmon install...
🇮🇹🇺🇦 Ukrainian cybersecurity will receive $1.2 mn boost from Italy, with most funds directed toward modernizing infrastructure in Ternopil region through server procurement, EDR-equipped protected networks.
€900,000 ($1.04 mn) will go toward implementing two cybersecurity projects in Ternopil region.
€900,000 ($1.04 mn) will go toward implementing two cybersecurity projects in Ternopil region.
January 28, 2026 at 2:25 PM
🇮🇹🇺🇦 Ukrainian cybersecurity will receive $1.2 mn boost from Italy, with most funds directed toward modernizing infrastructure in Ternopil region through server procurement, EDR-equipped protected networks.
€900,000 ($1.04 mn) will go toward implementing two cybersecurity projects in Ternopil region.
€900,000 ($1.04 mn) will go toward implementing two cybersecurity projects in Ternopil region.
Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie
Pour ceux qui n'ont pas encore compris, avec le harcèlement policier et judiciaire que subit Rima Hassan et tous les défenseurs de la Palestine et du droit international, que la France est dirigée par un pouvoir sioniste et islamophobe, voici une énième preuve❗⬇️
Soutien à @manesnadel.bsky.social
Soutien à @manesnadel.bsky.social
Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie
Politis révèle pourquoi le gouvernement veut dissoudre Génération EDR. Le collectif antiraciste est accusé de liens avec l’organisation antifasciste la Jeune Garde, dissoute. Les militants de Générati...
www.politis.fr
April 3, 2026 at 8:08 PM
Le gouvernement s’apprête à dissoudre Génération EDR, collectif de lutte contre l’islamophobie
Security researcher Kostas Tsialemis has released EDR Telemetry, a project that tracks EDR telemetry capabilities across OS platforms.
The project is intended to reveal EDR coverage gaps for network defenders (and vendors, too).
www.edr-telemetry.com
www.linkedin.com/feed/update/...
The project is intended to reveal EDR coverage gaps for network defenders (and vendors, too).
www.edr-telemetry.com
www.linkedin.com/feed/update/...
October 24, 2024 at 3:02 PM
Security researcher Kostas Tsialemis has released EDR Telemetry, a project that tracks EDR telemetry capabilities across OS platforms.
The project is intended to reveal EDR coverage gaps for network defenders (and vendors, too).
www.edr-telemetry.com
www.linkedin.com/feed/update/...
The project is intended to reveal EDR coverage gaps for network defenders (and vendors, too).
www.edr-telemetry.com
www.linkedin.com/feed/update/...
In fact it is my job to build a company more secure, largely using features and manageability Vista introduced. I conference regularly with another F100 architect, same thing. We can operate EDR and detection. But our charge is fixing the implementation of Windows. Original sin stains everything.
January 17, 2025 at 11:23 PM
In fact it is my job to build a company more secure, largely using features and manageability Vista introduced. I conference regularly with another F100 architect, same thing. We can operate EDR and detection. But our charge is fixing the implementation of Windows. Original sin stains everything.
🔎 Politis révèle pourquoi le gouvernement veut dissoudre Génération EDR. Le collectif antiraciste est accusé de liens avec l’organisation antifasciste la Jeune Garde, dissoute. Les militants de Générations EDR dénoncent une répression de l’antiracisme.
April 3, 2026 at 11:21 AM
🔎 Politis révèle pourquoi le gouvernement veut dissoudre Génération EDR. Le collectif antiraciste est accusé de liens avec l’organisation antifasciste la Jeune Garde, dissoute. Les militants de Générations EDR dénoncent une répression de l’antiracisme.
Jesper Olsen Lab (Guzman et al) independently reproduces MAP-MS (eDR) proteome depth and compares Astral Zoom MS to the older model.
"...yielding ~15,000 and ~30,000 additional precursors..."
eDR: www.biorxiv.org/content/10.1...
MAP-MS: www.biorxiv.org/content/10.1...
"...yielding ~15,000 and ~30,000 additional precursors..."
eDR: www.biorxiv.org/content/10.1...
MAP-MS: www.biorxiv.org/content/10.1...
July 19, 2025 at 9:58 AM
Jesper Olsen Lab (Guzman et al) independently reproduces MAP-MS (eDR) proteome depth and compares Astral Zoom MS to the older model.
"...yielding ~15,000 and ~30,000 additional precursors..."
eDR: www.biorxiv.org/content/10.1...
MAP-MS: www.biorxiv.org/content/10.1...
"...yielding ~15,000 and ~30,000 additional precursors..."
eDR: www.biorxiv.org/content/10.1...
MAP-MS: www.biorxiv.org/content/10.1...
🗣️ « Génération EDR s’inscrit dans la continuité de la Jeune Garde. »
Le ministère de l’Intérieur envisage de dissoudre le collectif anti-islamophobie Génération EDR ⬇️
www.streetpress.com/sujet/177522...
Le ministère de l’Intérieur envisage de dissoudre le collectif anti-islamophobie Génération EDR ⬇️
www.streetpress.com/sujet/177522...
Le ministère de l’Intérieur envisage de dissoudre le collectif anti-islamophobie Génération EDR
Retrouvez sur StreetPress nos enquêtes & infos, sur Paris et en banlieue. Et découvrez chaque jour les lieux et les gens qui font l’actu urbaine en Île-de-France.
www.streetpress.com
April 3, 2026 at 3:36 PM
🗣️ « Génération EDR s’inscrit dans la continuité de la Jeune Garde. »
Le ministère de l’Intérieur envisage de dissoudre le collectif anti-islamophobie Génération EDR ⬇️
www.streetpress.com/sujet/177522...
Le ministère de l’Intérieur envisage de dissoudre le collectif anti-islamophobie Génération EDR ⬇️
www.streetpress.com/sujet/177522...
If we could just replace “EDR” with “EDM”, InfoSec would be a happier place.
In the meantime, you should always EDM 🎧 while you EDR 🔍
open.spotify.com/track/2x5UeF...
In the meantime, you should always EDM 🎧 while you EDR 🔍
open.spotify.com/track/2x5UeF...
Cloud Lifter
Sultan + Shepard · Endless, Dawn · Song · 2024
open.spotify.com
April 4, 2025 at 10:42 PM
If we could just replace “EDR” with “EDM”, InfoSec would be a happier place.
In the meantime, you should always EDM 🎧 while you EDR 🔍
open.spotify.com/track/2x5UeF...
In the meantime, you should always EDM 🎧 while you EDR 🔍
open.spotify.com/track/2x5UeF...