Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It definitely isn't impossible to bypass. It gets bypassed all the time, even publicly. There's like 80 different CrowdStrike bypass tricks that have been published at some point. It's hard to bypass and it takes skill, and yes it's the best EDR, but it's not the best solution - the best solution is an architecture where bypassing the EDR doesn't mean you get to own the network.

An attacker that's using a 0 day to get into a privileged section in a properly set up network is not going to be stopped by CrowdStrike.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: