News for hackers. Stuff that matters.
Re:An unexpected journey into Microsoft Defender's signature... by Angostura on Tuesday July 02, 2024 @01:47AM (#40853860)
A note to the author: if you are going to include “ EDR and EPP” in the intro, please spell them out on first use
Re:An unexpected journey into Microsoft Defender's signature... by gpvos on Tuesday July 02, 2024 @04:16AM (#40854580)
EDR = Endpoint Detection and Response, EPP = Endpoint Protection Platform.
Re:An unexpected journey into Microsoft Defender's signature... by kemotep on Tuesday July 02, 2024 @05:54AM (#40855029)
I have never heard of EPP but the premium version of Microsoft Defender and things like SentinelOne bill themselves as EDR and do in fact have response features to be able to delete the virus files or disable network access of the compromised device, kill running services, etc.

The R stands for Response.

Re:An unexpected journey into Microsoft Defender's signature... by technion on Tuesday July 02, 2024 @05:03PM (#40860395)
Marketing for both of these companies now claims edr is obsolete and calls out the risk of using an edr product, with xdr being the cool acronym of the month to sell.
Re:An unexpected journey into Microsoft Defender's signature... by qual on Tuesday July 02, 2024 @10:41AM (#40857179)
More precisely, EDR (somtimes EDTR -- endpoint detection and threat response) is one component of a robust endpoint protection platform.

EPPs will consist of threat detection and response (EDR), as well as proactive prevention, vulnerability management, threat intelligence, data-loss prevention, encryption management, etc.

Re:An unexpected journey into Microsoft Defender's signature... by USiBqidmOOkAqRb on Tuesday July 02, 2024 @05:18AM (#40854851)
Re:An unexpected journey into Microsoft Defender's signature... by serhack_ on Tuesday July 02, 2024 @05:30AM (#40854891)
I'm not the author, but I'll try to let them know :- )