edr.md

Case Studies

LBL

• https://it.lbl.gov/countdown-to-sophos-end-of-life/
• https://it.lbl.gov/crowdstrike-falcon/

Misc Universities

• https://tech.rochester.edu/services/antivirus-software/
• https://td.unh.edu/TDClient/60/Portal/KB/ArticleDet?ID=816
• https://its.uchicago.edu/epp/
• https://it.osu.edu/news/2023/05/19/how-crowdstrike-falcon-protects-university-devices
• https://confluence.som.yale.edu/display/SC/CrowdStrike+Frequently+Asked+Questions
• https://www.bu.edu/tech/services/cccs/desktop/device-security/endpoint-protection/

Comparisions

GitHub Repos

• https://github.com/tsale/EDR-Telemetry
• https://github.com/CyberSecurityUP/EDR-Assessment/

Academic

• An Empirical Assessment of Endpoint Security Systems Against Advanced Persistent Threats Attack Vectors

Mitre - 2020

21 Evals by Mitre

• https://attackevals.mitre-engenuity.org/enterprise/participants/sentinelone?view=overview&adversary=wizard-spider-sandworm
• https://attackevals.mitre-engenuity.org/enterprise/participants/crowdstrike?view=overview&adversary=wizard-spider-sandworm

Evasion

• TA Phone Home: EDR Evasion Testing Reveals Extortion Actor's Toolkit - Nov 2024