Brutkey

Billy O'Neal
@malwareminigun@infosec.exchange

@cR0w@infosec.exchange I'm still waiting for the threat EDR supposedly protects from despite it being mass deployed all over everything.

One would think after the CrowdStrike incident someone would have had to better explain by now.

cR0w
@cR0w@infosec.exchange

@malwareminigun@infosec.exchange I get more admin functionality from them than I get security functionality. And that's not a compliment.

But there's also the compliance benefit so I guess that helps with business risk.

Billy O'Neal
@malwareminigun@infosec.exchange

@cR0w@infosec.exchange What 'compliance' ?

wertzui
@wertzu1@mastodon.social

@malwareminigun@infosec.exchange @cR0w@infosec.exchange there is a thing called Fips (in the us atl) that specifies what your network needs to be like to be "secure" in order to handle stuff like medical or finantial information

cR0w
@cR0w@infosec.exchange

@malwareminigun@infosec.exchange Industry-specific regulations and insurance requirements are the first ones that come to mind.