search

tsale / EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.
1.43k stars 141 forks source link

Possible Enhancement request #59

Closed flukes86 closed 2 weeks ago

flukes86 commented 3 months ago

This is super cool and useful thanks for shareing. One thing that would be a possible awesome contribution would be to know the isolation capabilties of these tools? ie. can you remotely isolate affected systems? Understood this list is more related to the telemtry output from the different tools but it would be cool to know some other capabilities the tools have and be able to benchmark them. Also another step could be to include the DFIR capabilties of the tools but understand this would need significant reserach and testing. Just throwing ideas out there. Great project thanks again!

tsale commented 2 weeks ago

Thank you for the kind words. This project is focusing on the telemetry and not further Response capabilities/features of each EDR. Maybe that's a good idea for a different project.