Enterprise Advanced Security (EDR): CrowdStrike Falcon – DETECTION

EDR is more than anti-virus

Understand cybersecurity testing with visible threat intelligence

An Endpoint Detection and Response (EDR) product is more than anti-virus, which is why it requires advanced testing. This means testers must behave like real attackers, following every step of an attack.

Intelligence-led testing

While it’s tempting to save time by taking shortcuts, a tester must go through an entire attack to truly understand the capabilities of EDR security products.

Each step of the attack must be realistic too. You can’t just make up what you think bad guys are doing and hope you’re right. This is why SE Labs tracks cybercriminal behaviour and builds tests based on how bad guys try to compromise victims.

Read this SE Labs assessment of CrowdStrike Falcon and discover how its handles advanced targeted attacks. You’ll find that EDR is more than just anti-virus.

Sign up to our monthly business and personal security newsletters.