Endpoint Hunting in an AntiEDR World
Endpoint hunting techniques for defenders investigating activity that bypasses EDR. Includes presentation slides and examples of detection evasion.
With the proliferation of EDR we have seen attackers at all levels upping their game to bypass brittle (and not so brittle) endpoint detection. This talk showcases the background to EDR technology and some practical real world examples of detection bypasses.
Originally presented at a local SANs and community event (modification with additional presentations since).