7 Minute Security
7MS #305: Evaluating Endpoint Protection Solutions - Part 2
Apr 12, 2018 · 11 min · 17.1 MB
0:00-11:52
Streams straight from the publisher. podnod never proxies or re-hosts episode audio.
Today is part two of evaluating endpoint solutions, where I primarily focus on Caldera which is an adversary simulation system that's really awesome! You can essentially setup a virtual attacker and cut it loose on some test machines, which is what I did as part of an endpoint protection evaluation project.
The attacks simulated are from Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) project. So the big question is...did any of these endpoint solutions catch some of the simulated ATT&CKs? Check out today's podcast to find out!
Oh, and I wrote up my quick install guide for Caldera here.