News for hackers. Stuff that matters.

A comment on The CrowdStrike Failure Was a Warning. Parent comment

Re:The CrowdStrike Failure Was a Warning by khafra on Monday July 22, 2024 @02:42AM (#41031514)
> They just happen to be the best, primarily because of their intel, and you wouldn't believe this but because their sensor has always been very lightweight and easy to manage.

I think an important part of their dominance is that they're the zero configuration EDR. Buy Carbon Black, and you'll need to know something about what's installed in your environment, what you do and don't want running. Buy SentinelOne, and you need to know that plus you have to learn a complex product.

But with CS, you pretty much just install it, then get that sweet, sweet green checkmark on your security audit.

[ Parent | on HN ]
Re:The CrowdStrike Failure Was a Warning by notepad0x90 on Monday July 22, 2024 @02:56AM (#41031584)
You nailed it. It is a sweet green check mark but it also works well. The main reason CISO's get it so that if they ever do get compromised they can say they purchased the best security product out there. but there are still a certain portion of their customers that get targeted by APT's, think defense contractors, government orgs like the NRO, oil and gas, finance, power companies that have a large budget and that checkbox is the least of their worries.
[ Parent | on HN ]