logo
Defence blues
Endpoint detection and response
  • Red tradecraft
  • Privacy greenhouse
  • Purple crossroads
  • Indigo observatory
  • Contact
Initializing search
    • Blue team @Home
    • Servers without a security team
    • Honeytech for humans
    • Blue team for dev
    • OT and ICS security
    • Counter moves
      • Closing the doors just walked through
      • The machine at the point of impact
        • Reducing endpoint attack surface
        • Detecting endpoint attacks
        • Gaps in endpoint controls
        • Endpoint detection and response
          • Linux endpoint detection and response
          • macOS endpoint detection and response
          • Windows endpoint detection and response
        • Endpoint detection and response
          • Linux endpoint detection and response
          • macOS endpoint detection and response
          • Windows endpoint detection and response
      • Traffic patterns as evidence
      • The surface designed to be accessible
      • The application layer as a target
      • Infrastructure you defend but do not own
      • Where the container meets the host
      • Systems that were never meant to be networked
      • The domain as an attack graph
      • The gap between access and authority
      • Harvesting stored secrets
      • Surviving the reboot
      • From target to target
      • Plausibility as cover
      • Memory corruption and its limits
      • Watching data being gathered
      • Watching the exits
      • Limiting the blast radius
      • Operational cost of security controls
    • Golem Trust Computing Ltd.
    • Department of Silent Stability
    • The Home for Bewildered Beasts of Legend
    • Archive

    Endpoint detection and responseΒΆ

    Technique references for endpoint monitoring across Linux, macOS, and Windows. Covers kernel-level telemetry, memory protection, behavioural detection, and response actions for small teams without dedicated security tooling.

    • Linux endpoint detection and response
    • macOS endpoint detection and response
    • Windows endpoint detection and response
    2026-05-27 11:27
    © Copyright 2026, TyMyrddin.
    Created using Sphinx 7.2.6. and Sphinx-Immaterial

    Made with love in the Unseen University, 2026, with a forest garden fostered by /ut7