May 2018
Intermediate to advanced
326 pages
8h 32m
English
Endpoint Detection and Response (EDR) solutions are essentially a Next-Generation set of security tools which focus on monitoring, detecting, investigating, and mitigating malicious activities as well as possible attacks on endpoints, beyond the legacy signature-based approach used in traditional security tools.
Let's take a look at one example of where the EDR system can help:
An online shopping company's Network Operating Center (NOC) started receiving alerts for 500 internal server error logs, with 10% of transactions resulting in failure. During initial investigation, the NOC thought it was some sort of DDoS attack, but their firewalls and network intrusion detection system events didn't report ...
Read now
Unlock full access