My experience testing EDR with AtomicRedTeam

Hello everyone!

I've recently tested Crowdstrike's EDR with Atomic Red Team. Testing with this type of tool was necessary since there are some restrictions with actual Red Team exercises I could perform in my project.

I aggregated the most often seen TTPs used by Threat Actors and tested the EDR based on them. I went through each of the tests from each techniques sequentialy, assuming different stages of an attack, using the ATT&CK framework.

The majority of the tests did …

crowdstrike cybersecurity edr exercises experience hello project red team red team exercises restrictions team testing threat threat actors tool ttps