edr
Safeguard articles tagged "edr" — guides, analysis, and best practices for software supply chain and application security.
5 articles
Reverse shell attack mechanics and detection
Reverse shells flip the direction of the connection so outbound firewall rules never fire — here is how they work and the signals that catch them anyway.
What is EDR (Endpoint Detection and Response)
What EDR actually detects, how it differs from antivirus, XDR, and MDR, and why supply chain attacks like XZ Utils and 3CX slip past it entirely.
How to set up endpoint detection and response (EDR)
A step-by-step guide to setting up EDR across your fleet: choosing a platform, deploying agents, tuning policies, and verifying coverage before an incident tests it for you.
CrowdStrike Falcon Global Outage: A Post-Mortem Deep Dive
A technical reconstruction of the July 19 CrowdStrike Falcon sensor crash that grounded 8.5M Windows hosts, and what supply chain owners should change.
SentinelOne Supply Chain Detection Logic for Build Systems
How to extend SentinelOne's behavioral detection engine to cover build agents, package registries, and developer endpoints without drowning analysts in false positives.