Articles by Mark Dufresne

Elastic Security has long had open source roots. Learn how we're continuing to build on that foundation today by opening a new public repo, protection-artifacts.

Find out how well Elastic Endpoint Protection did in the latest assessments from AV-Comparatives, NSS Labs Advanced Endpoint Protection (AEP), and MITRE ATT&CK.

MITRE and seven EDR vendors collaborated to see how various products can provide security teams with visibility into post-compromise adversary techniques.

In an attempt to appeal to information security executives and practitioners, some vendors have positioned Machine Learning (ML) – often liberally decorated as

Three prominent cybersecurity trends converged today: ransomware attacks, data dumps of nation-state offensive capabilities, and healthcare industry attacks.

Including attacker techniques and patterns to signature-based defenses is the best way to maximize the chance of success in minimizing damage and loss.