Search

Home > Down the Security Rabbithole > DtSR Episode 439 - TPA Open Source Endpoint Defense
Podcast: Down the Security Rabbithole
Episode:

DtSR Episode 439 - TPA Open Source Endpoint Defense
Category: Technology
Duration: 00:41:10
Publish Date: 2021-03-16 04:00:00
Description:

Prologue

OK, say it with me, defender tools suck. They all have their own dashboards, data formats, ways to look at what's going on...and that wouldn't be bad if they even remotely worked together.

OSQuery isn't the end-all for endpoint tools, but it surely can tell you a whole lot about what's going on out there - and then you can actually intelligently do something. But it needs a front-end...so enter Fleet. This episode is all about defending the endpoint using open source, and Fleet/OSQuery specifically.

 

Guest
Total Play: 0