The Importance of Pre-Backed Detection in EDR

Olaf: I think a lot of security programs really need to consider the fact that you can deploy vendor software get support accelerated have some some blun some stability and get immediate risk reduction. It's not really like a viable organizational strategy because you're carrying a lot of risk while you're trying to figure out when does event logs flow, Olaf says. If you want to build your own telemetry rich detections in your sim great rip out the vendor tool install something better but you know you just can't let the perfect be the enemy at the good absolutely yeah.