Skip to content

Bedrock - RSAC™ Innovation Showcase: The Intersection of AI and Cyber

AI SecurityRSAC Cybersecurity5 minOpen on YouTube ↗

Analysts investigate attack surfaces and defenses concerning Bedrock - RSAC™ Innovation Showcase: The Intersection of AI and Cyber.

Summary

Overview: bedr is a Linux syscall monitor that uses Berkeley Packet Filters that hook via kernel tracepoints. It collects the holy trinity of EDR data - proc events, filemods, and netconns – and ships them off to somewhere else for off-machine detection and response. Basically, it’s half of what you need to make an EDR!

Related talks