Exploring Osquery, Fleet, and Elastic Stack as an Open-source solution to Endpoint Detection and Response

Endpoint Detection and Response (EDR) capabilities are rapidly evolving as a method of identifying threats to an organization's computing environment. Global research and advisory company, Gartner defines EDR as: 'Solutions that record and store endpoint-system-level behaviors, use various data...

By

Christopher Hurless

September 10, 2019

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - New FOR518- Mac and iOS Forensic Analysis Poster Update_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 11, 2024

New FOR518: Mac and iOS Forensic Analysis Poster Update

The latest updates to the Digital Forensics and Incident Response Poster bring a wealth of new sections and enhancements.

Digital Forensics, Incident Response & Threat Hunting

January 16, 2024

FOR528: Ransomware & Cyber Extortion Course Updates Implemented – What’s New?

The recent FOR528 course better addresses the differences between ransomware and cyber extortion, and provides new hands-on labs and bonus content.

Cybersecurity Insights, Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Cloud Security, Open-Source Intelligence (OSINT), Cybersecurity Leadership, Security Awareness, Artificial Intelligence (AI)

December 18, 2023

Top 15 SANS Summit Talks of 2023

This year, SANS hosted 16 Summits with 209 talks. Here were the top-rated talks of the year.