nXDR · Dev diary
Build lognXDR.
What the endpoint agent does, shown working rather than described — one entry at a time.
What gets posted here
New modules as they ship, and existing capabilities put in front of tests that actually exercise them — with the result as it came out, including the ones that only get part of the way.
Entries show what happened and what it looked like in the console. Tests run in a disposable virtual-machine lab, so the machine names, users and addresses visible in the screenshots belong to that lab and nothing else.
Entries
-
LSASS minidump: a credential theft attempt, caught in a second
A lab machine was used to try the most common goal of an intrusion: stealing the passwords held in memory. What nXDR raised, and what it did not do.
Read entry →