Skip to content

RAG Q and A with Bedrock and Astra - Who died in Romeo and Juliet?

Kirsten Hunter

Blue TeamThe Linux Foundation30 minOpen on YouTube ↗

Analyzes RAG Q and A with Bedrock and Astra - Who died in Romeo and Juliet and evaluates key implications for security practitioners.

Summary

Overview: bedr is a Linux syscall monitor that uses Berkeley Packet Filters that hook via kernel tracepoints. It collects the holy trinity of EDR data - proc events, filemods, and netconns – and ships them off to somewhere else for off-machine detection and response. Basically, it’s half of what you need to make an EDR!

Related talks