Enterprise Advanced Security (EDR): CrowdStrike Falcon – DETECTION

Sector: Enterprise
Testing: June

 

EDR is more than anti-virus

Understand cybersecurity testing with visible threat intelligence

An Endpoint Detection and Response (EDR) product is more than anti-virus, which is why it requires advanced testing. This means testers must behave like real attackers, following every step of an attack.

Loader Loading…
EAD Logo Taking too long?

Reload Reload document
| Open Open in new tab

Download [2.07 MB]

Product factsheets:

Intelligence-led testing

While it’s tempting to save time by taking shortcuts, a tester must go through an entire attack to truly understand the capabilities of EDR security products.

Each step of the attack must be realistic too. You can’t just make up what you think bad guys are doing and hope you’re right. This is why SE Labs tracks cybercriminal behaviour and builds tests based on how bad guys try to compromise victims.

Read this SE Labs assessment of CrowdStrike Falcon and discover how its handles advanced targeted attacks. You’ll find that EDR is more than just anti-virus.

Sign up to our monthly business and personal security newsletters.

Find out more

Our latest reports, for enterprise, small business and home users are now available for free. Please download them and follow us on Twitter and/or LinkedIn to receive news, comment, updates and future reports.

Visit our blog for more security testing news, analysis and the Cyber Security DE:CODED podcast.