Hacker Newsnew | past | comments | ask | show | jobs | submit | srozb's commentslogin

I would recommend osquery as a free/open source substitute that may be deployed relatively easy and allow you to gather plenty of high quality telemetry. I've success story with it deployed to medium-sized company (20k workstations, 3k servers).

Keep in mind that you will need to implement monitoring based on data produced by EDR and corresponding incident handling. This is more difficult than paying for software and deploying it to your assets.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: