• 0 Posts
  • 115 Comments
Joined 1 year ago
cake
Cake day: June 2nd, 2023

help-circle







  • CrowdStrike Falcon is XDR product, there is hundreds of similar products available.

    The role of XDR is to detect and block if some bad actor is trying to do something malicious in the machine. Old school virus signature detection is not enough anymore, you need pattern detection from network communication/DNS queries etc.

    When corporation has thousands of devices to monitor the OS each of those devices Is not relevant. You need to detect if some random user logs to some Linux info display thousand kilometers away, and starts scanning the network.

    Because the detection and response, needs to happen near realtime, for example Incase of cryptolockers, where all devices are encrypted within seconds, the software blocking this needs kernel level access.

    I work in critical infrastructure as IT, but luckily we did not use falcon


  • The best implementation of this that I have seen has been Frends Integration platform (https://frends.com). We use it at work, and have implemented ~500 business and integration processes with it.

    This kind of visual programming works well in close to business logic implementations, were it is important to be able to quickly understand the business need behind the process.

    How Frends work on the background, it compiles the visual process to C# code, so it is actually quite fast. Many solutions interpreters the process flow while executing, which makes them much slower.

    My background is in normal code development, and I still think that there is a place for that. I have always hated having the raw business process in code, because those tend to change, and reimplementing code because process changes, is always really annoying.