🧰 EDR

The items that name it 46

• IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
  articleas classification.technologies2026-10-29
• lee1981 (@lee1981b) on X
  articleas classification.technologies2026-10-21
• Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
  articleas classification.technologies2026-10-14
• Making sure the checks get printed
  articleas affected products2026-10-08It is written here as EDR (Endpoint Detection and Response).

  Endpoint Detection and Response

• One breach, please, and make no mistakes
  articleas tools2026-10-07It is written here as EDR (Endpoint Detection and Response).

  Recommended to be deployed on everything to gain internal visibility into compromise.

• Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack | Huntress
  writeupas classification.technologies2026-10-06
• How Huntress Detects and Responds to a ClickFix Attack
  writeupas classification.technologies2026-10-05
• The First 24 Hours: What Happens When Ransomware Lands
  writeupas tools2026-10-02It is written here as EDR (Endpoint Detection and Response).

  Used to confirm ransomware via mass file modification by a single process and for network isolation of an actively encrypting host while preserving memory

• From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-and-Response Architectures
  paperas classification.technologies2026-10-01
• Adversarial-Detection-Engineering/adeskills
  repoas classification.technologies2026-09-27
• The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint
  writeupas classification.technologies2026-09-24
• Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM
  writeupas classification.technologies2026-09-17
• DeathShotXD/0xCr0ssCrush
  repoas classification.technologies2026-09-14
• Machine Speed is a lie: stop trying to fight AI with AI
  articleas tools2026-09-03It is written here as EDR (Endpoint Detection and Response; detects credential dumping and can auto-quarantine endpoints and lock credentials).

  Endpoint Detection and Response; detects credential dumping and can auto-quarantine endpoints and lock credentials

• Customer Zero: Implementing Package Firewall at Endor Labs | Blog | Endor Labs
  articleas tools2026-08-25It is written here as EDR (endpoint detection and response).

  Being explored for comparison with package firewall logs via process events, to alert if an install process has no corresponding firewall log

• ARTOC by White Knight Labs - Review
  articleas classification.technologies2026-08-06
• Critical Security Controls for Governing AI Coding Agents | Blog | Endor Labs
  articleas classification.technologies2026-07-31
• AI-Assisted Vulnerability Management
  articleas tools2026-07-18It is written here as EDR (Endpoint Detection and Response).

  High-fidelity containment tasks via hardcoded execution logic

• 5 Modern Threats You Need to Watch
  articleas classification.technologies2026-07-14
• Plain Text Passwords: The Risks of Storing Them
  writeupas classification.technologies2026-07-06
• Orca Security: ITDR for the Cloud
  articleas tools2026-07-03It is written here as EDR (Endpoint Detection and Response).

  Watches processes, files, and memory on hosts to catch malware and endpoint intrusions; lacks visibility into identity-plane API attacks

• Lateral Movement Attack: Techniques, Detection & Prevention
  writeupas classification.technologies2026-07-01
• How the RaaS Business Model Actually Works
  articleas classification.technologies2026-07-01
• Trust No One: Automating macOS Privilege Escalation at Scale
  writeupas classification.technologies2026-06-24
• The OpenSourceMalware Show #9
  talkas tools2026-06-18It is written here as EDR (Endpoint Detection and Response).

  Endpoint security monitoring tool; criticized in the discussion as not designed to catch open-source/software-supply-chain malware because its traffic/signals resemble normal development activity

• Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files
  articleas tools2026-06-18It is written here as EDR (Endpoint Detection and Response).

  flags suspicious process behavior and known-bad binaries; described as having a blind spot against Miasma/Hades since they use memory-resident techniques and legitimate signed runtimes

• The OpenSourceMalware Show #8
  talkas tools2026-06-11It is written here as EDR (Endpoint Detection and Response).

  Contrasted with package firewalls; detects malicious activity post-execution rather than proactively blocking installs.

• Why EDR and proxy won’t save you from supply chain malware
  articleas tools2026-06-02It is written here as EDR (Endpoint Detection and Response).

  Watches processes for suspicious behavior (syscalls, parent-child relationships, signatures); described as ineffective against supply chain malware since malicious postinstall scripts look identical to legitimate runtime behavior

• Exposed RDP: The Misconfiguration Attackers Keep Exploiting
  articleas classification.technologies2026-05-19
• Threat Actor Defense Evasion: How Attackers Disable AV & EDR
  writeupas classification.technologies2026-05-18
• VSCode Lifecycle Script Malware
  writeupas tools2026-05-16It is written here as EDR (Endpoint Detection and Response).

  Detects anomalous behavior on endpoints; noted as detecting, not preventing

• Security Engineering is a Context Problem
  articleas tools2026-05-06

  Security infrastructure built by security teams to feed and clear the triage queue

• Untangling a Linux Incident With an OpenAI Twist
  writeupas classification.technologies2026-04-17
• Attackers Love Your VPN To-Do List
  articleas classification.technologies2026-04-17
• Something Phishy in the /tmp Folder
  writeupas classification.technologies2026-03-18
• How the Huntress SOC Stopped a VPN-Based Ransomware Attack
  writeupas classification.technologies2026-03-13
• Introducing MacNoise!
  toolas classification.technologies2026-02-26
• Trust Me, I’m a Shortcut
  writeupas tools2026-02-12It is written here as EDR (generic, unnamed).

  Defensive software category noted to often not monitor the contents of an LNK file until it is opened.

• They Got In Through SonicWall. Then They Tried to Kill | Huntress
  writeupas classification.technologies2026-02-04
• A Idealistic View of Malware Analysis Definitions
  articleas tools2026-01-13It is written here as EDR (Endpoint Detection and Response).

  observes execution on the host itself as a form of dynamic analysis

• Cross-Platform Unity in EDR
  articleas classification.technologies2026-01-13
• Trial, Error & Typos: Malware Isn't Always 'Sophisticated' | Huntress
  writeupas classification.technologies2025-12-22
• Dissection of a PHP Backdoor leveraging php-win.exe
  writeupas tools2025-11-16It is written here as EDR (unspecified product).

  Endpoint detection tool tested against the backdoor chain; did not alert on PHP execution or Bluetrait installation, only raised a medium alert on attempted Atera installation

• Threats Plague Educational Organizations
  writeupas classification.technologies2025-11-13
• EDR: The Great Escape - RomHack Training Review
  writeupas classification.technologies2024-09-30
• Today I Learned - Device Discovery
  writeupas classification.technologies2024-04-27