Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

EDR

0001-01-01

Endpoint Detection and Response (EDR) is a security solution that monitors devices for cyber threats and responds to them.


Links to this note

  • Linux Persistence: Processes
  • Defanging Linux LKM Rootkits With cleanup_module()
  • prevent LKM unloading with rmmod
  • reference count to avoid LKM removal
  • UnhookingLinuxEdr
  • unhookinglinuxedrs-matheuzsecurity2025
  • Main Index
  • symbiote-kennedy2022
  • dumpinglsasslikeits2019-reid2024
  • sliverintro-malone2023
  • linenoise-phrack71-2024
  • unveiling wolfsbane-sperka2024
  • EDR evasion
  • evadingedr-hand2024
  • borges2021
  • hooks
  • linuxapts-great2020
  • opensourceedr-blackhills2021
  • actually review security alerts
  • bring your own island
  • bring your own tools
  • CrowdStrike Falcon
  • firewall implant
  • Main Index - E

Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.