Mitre: A Good Place to Start in Detection

Jared: It seems a lot of times that whenever an EDR vendor is deployed and we've seen this inside of some organizations that it's oftentimes that the detection response process or that team really seems to lean on those detections for example ATP. Jared: Some of the adversary activity that you might encounter might be really easy to detect in your environment if you can kind of custom tailor it but a lot of the times it's not going to fire out of the box right? Jared: I'd much rather put investments into that type of security than I would trying to detect lulbins or whatever sure. He says he doesn't feel there's enough transparency to achieve what they're