))
EDRSilencer - Designed to evade detection by endpoint detection and response (EDR) systems
Manage episode 445344720 series 3606199
Contenu fourni par wnguyen. Tout le contenu du podcast, y compris les épisodes, les graphiques et les descriptions de podcast, est téléchargé et fourni directement par wnguyen ou son partenaire de plateforme de podcast. Si vous pensez que quelqu'un utilise votre œuvre protégée sans votre autorisation, vous pouvez suivre le processus décrit ici https://fr.player.fm/legal.
A new cybersecurity threat has emerged with the use of the EDRSilencer tool, which is designed to evade detection by endpoint detection and response (EDR) systems. This open-source tool allows attackers to identify and block communication between EDR tools and their management consoles, preventing alerts from reaching security teams. The tool is particularly concerning because it has been observed in attacks attempting to disable various popular EDR products, including Microsoft Defender, SentinelOne, and FortiEDR. Researchers are urging organizations to implement multi-layered security controls, behavioral analysis, and anomaly detection to mitigate the threat posed by EDRSilencer.
148 episodes
Partager
