Extend EDR Visibility by Logging Everything: Demo with Free Integrations
summary
Shows how to augment Endpoint Detection and Response (EDR) visibility by collecting network and application logs alongside endpoint data, using freely available tools and integrations. Demonstrates log collection and event correlation workflows combining EDR with open/free log collection and analysis technologies.
AI-written summary · about
chapters (6)
- 0:00Start
- 5:47Sine qua non of Detection & Response
- 12:57Logging Problem
- 19:07Community ID
- 26:22Extending EDR Visibility
- 34:21Tines
related talks
40mHow to Build a Long-term XDR Architecture Strategy
35mEDR Internals From a Defenders Perspective
29mHunting and Stopping Threats with Elastic Security
40mBeyond Endpoints: A Case for Open XDR
39mEDR = Erase Data Remotely, By Cooking An Unforgettable (Byte) Signature Dish
43mMaking Sense of a Confusing Detection and Response Solutions Landscape
27mCollect All the Data; Protect All the Things
45mI Want to Watch Your Logs