This is the key question for me: is there a way to get [most of] the security be... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		apitman on July 19, 2024 \| parent \| context \| favorite \| on: CrowdStrike Update: Windows Bluescreen and Boot Lo... This is the key question for me: is there a way to get [most of] the security benefits of EDR without giving away the keys to the kingdom.

lucasRW on July 19, 2024 [–]

No. If an EDR relies on userland mechanisms to monitor, these userland mechanisms can easily be removed by the malicious process too.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact