That "EDR 0-day" post on reddit is quite entertaining!

@buherator Link? And do you need a Reddit account to see it?

@cR0w https://www.reddit.com/r/netsec/comments/1mryiha/elastic_edr_0day_microsoftsigned_driver_can_be/

(note that I said entertaining, not informative or useful...)

@buherator Thanks. It let me see it without an account. I've got it saved to read with a beer later. And maybe some popcorn.

@cR0w @buherator What da

@mttaggart @buherator That good, huh? 😆

@cR0w @mttaggart @buherator LOL at “Every organization running Elastic’s Defenses (SIEM + EDR) is effectively carrying a potential attacker inside its own trusted defenses.” 😂

@mkoek @mttaggart @buherator Oh my. That really was... Interesting. I'm almost nervous sharing it in case someone takes it as accurate or serious. 😆