7MS #305: Evaluating Endpoint Protection Solutions - Part 2

Apr 12, 201812 minutes


Today is part two of evaluating endpoint solutions, where I primarily focus on Caldera which is an adversary simulation system that's really awesome! You can essentially setup a virtual attacker and cut it loose on some test machines, which is what I did as part of an endpoint protection evaluation project.

The attacks simulated are from Adversarial Tactics, Techniques & Common Knowledge (ATT&CK) project. So the big question is...did any of these endpoint solutions catch some of the simulated ATT&CKs? Check out today's podcast to find out!

Oh, and I wrote up my quick install guide for Caldera here.



Listen Now

Automatically download new episodes