Notifications
Clear all
Endpoint / EDR / XDR
1
Posts
1
Users
0
Reactions
23
Views
Topic starter
20/07/2026 6:09 am
Just saw this on a vendor's blog. Sounds useful. But also sounds like extra work and probably needs a paid tier.
My EDR already collects event logs. Why do I need Sysmon too? Isn't that redundant? And if it's so good, why isn't it the default setup?
Looking at the config they suggested. Seems like more noise. How do you filter it? Who pays for the extra storage? Feels like a hidden cost to make their base product look weak.