9. EDR/XDR

Lesson#99 of 107 in project Theory

Microsoft Defender for Endpoint
CrowdStrike
SentinelOne

Concepts


Process tree
Network connections
File creation
Registry changes
User activity
Command line
Persistence
Detection
Response

Previous

Next