EDR

2026

Detection Is a Data-Modeling Problem -

What You Cannot See -

Cutting the Network from Inside -

The Authority Problem -

Naming Things That Move -

The Shape of a Pipeline -

How an Operating System Decides to Let You Watch It -

Building a Mini-EDR Agent - Monitoring Process Creation with ETW in C -