Comodo open-sources its EDR solution

guest · Nov 12, 2020

Comodo open-sources its EDR solution
OpenEDR, announced in September, is available on GitHub starting this week
November 12, 2020
https://www.zdnet.com/article/comodo-open-sources-its-edr-solution/

Cyber-security firm Comodo has open-sourced this week its endpoint detection and response (EDR) solution, becoming the first major security vendor to take this route.

Released as OpenEDR, the project's source code was released this week on GitHub after Comodo touted the move to open source back in September [1, 2].
EDRs are considered the next step in the evolution of antivirus software. Classic antivirus software is designed to block malware when it executes.

EDRs are built differently, with a more proactive approach. They work by actively monitoring for suspicious behavior on endpoints and the local network and then sending alerts to a company's IT staff to investigate.
Click to expand...

They don't necessarily look for confirmed threats but, instead, can also look for indicators of suspicious activity that sometimes precedes actual malware infections or threat actor intrusions.

"We are offering our EDR as open source because we feel strongly that as cyber-threats increase, every company should have access to this capability regardless of budget or ability to purchase it," Alan Knepfer, President and Chief Revenue Officer at Comodo, said back in September.
Click to expand...

Comodo's OpenEDR will include all the basic functionality of an EDR. This will include the ability to roll out custom detection rules and IOCs, real-time monitoring of workstation filesystems, detection of fileless threats, a recommendation engine that advises of measures that need to be taken, a GUI, and a threats vector investigation capability.

A technical breakdown of OpenEDR is available here, while the project's support forum is here.
Click to expand...

Rasheed187 · Nov 15, 2020

This is very interesting, why would Comodo do this since EDR is a huge money maker? Even M$ decided to improve Win Def AV in order to entice companies to buy Win Def ATP. Will be interesting to see how this plays out, seems to be a marketing trick, but I'm not sure the biggest companies will switch to such an open source system.

Log in or Sign up

Comodo open-sources its EDR solution

guest Guest

Rasheed187 Registered Member

Log in or Sign up

Comodo open-sources its EDR solution

guest Guest

Rasheed187 Registered Member

Useful Searches