Articles, ASD, ASD 8, ASD essential 8, Australian cyber security centre, Endpoint Detection Response, EndPoint Protection, Extended detection and response, Extended Detection Response, Microsoft Defender, Microsoft Defender for Endpoint, Protection
Protection before Detection – Endpoint detection response
Read MoreProtection before Detection – Endpoint detection response Endpoint Detection and response gets a lot of attention from the entire cyber security industry, EDR as it is commonly known is a valuable tool in a corporate kitbag, but is Endpoint and response something that should be acquired first, second or where? If we review the Australian…
Articles, ACSC, ACSC essential 8, ASD, ASD 8, ASD essential 8, EndPoint Protection, Microsoft Defender, Microsoft Defender for EndpointThe No.1 way to protect Data, Defender for Business and Premium
Read MoreThe No.1 way to protect Data, Defender for Business and Premium, MSP’s and businesses looking for better coverage of the ASD Essential 8 with the fewest possible products should look at Microsoft Defender for Business or Business Premium preferably.ย This morning a colleague (thanks Ross) sent me this article and it reminded me that we…
Articles, ACSC, ACSC essential 8, ASD, ASD 8, ASD essential 8, EndPoint Protection, Microsoft Autopatch, Microsoft IntuneMicrosoft Autopatch – Patch Tuesday is gone for good!
Read MoreMicrosoft Autopatch – Patch Tuesday is gone for good! As an ex-systems administrator my life back in the good ol’ days was busy. Waiting for the next patches Testing the new patches Deploying the new patches …….. rolling back the new patches where it causes a legacy printer or other device to no longer function!…
Articles, Endpoint Detection Response, EndPoint Protection, Extended detection and response, Extended Detection Response, MDRAn Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors
Read MoreAn Empirical Assessment of Endpoint Detection and Response Systems against Advanced Persistent Threats Attack Vectors. Recently I wrote about EDR failure to detect and respond to cases of Advanced Persistent Threats here after discovering a research paper on the topic when researching the use of Machine Learning in cyber security Detection and response solutions such…
Articles, EndPoint Protection, Microsoft, Microsoft Defender, Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Endpoint ServerMicrosoft Defender for endpoint server licensing
Read MoreMicrosoft Defender for endpoint server licensing, Microsoft licensing is hard to follow at the best of times, not to mention product name changes/updates, licensing terms etc etc. Recently I have been involved in licensing questions for reseller and Managed Service Providers (MSP) across my region and Microsoft Defender for endpoint server licensing has come up…
- Articles, Endpoint Detection Response, EndPoint Protection, Extended detection and response, Extended Detection Response
Endpoint Detection Response Assessment = Fail
Read MoreEndpoint Detection Response Assessment = Failure of virtually all current leading Endpoint detection and response solutions to detect a range of ‘known’ attack methods. Throughout this work, we went through a series of attack vectors used by advanced threat actors to infiltrate organizations. Using them, we evaluated state-of-the-art EDR solutions to assess their reactions, as…
Advanced Managed Detect Response, AMDR, Articles, Endpoint Detection Response, EndPoint Protection, EPP, Extended Detection Response, Managed Detection Response, XDRAV NGAV EDR XDR MDR AMDR
Read MoreThe cyber security landscape has seen huge expansion and growth in the past 5 years and End Point Detection and Response (EDR) has been one of the biggest areas of expansion. https://www.morphisec.com/hubfs/2020%20State%20of%20Endpoint%20Security%20Final.pdf According to Ponemon Institute, 68% of organisations suffered one or more endpoint attacks that successfully compromised data or IT Infrastructure. In 2018 Gartner…
