skewer99
No user record in our sample, but skewer99 has activity below (stories or comments). Likely we have partial data — the full bulk-load will fill profiles in.
No user record in our sample, but skewer99 has activity below (stories or comments). Likely we have partial data — the full bulk-load will fill profiles in.
AKIDs... ugh. They'll be there if you use AWS + Mac. Again, the plaintext is the problem. These environment variables get loaded from the command line, scripts, etc. - CrowdStrike and all of the best EDRs also collect…
The monitoring and collection isn't the problem, that's what modern EDR does - collect, analyze, compare, and do statistics on all of the things. The plaintext part is not okay.