Interesting, never heard of Wazuh until now. That looks closer to what Trellix allows.
The guy in charge of picking endpoint security products (whose team writes these rules) has tried Defender and found it lacking in comparison. Also, that link is about historical search for threat hunting, so I’m not sure if it’s the correct one.
Edit: I just saw the section about writing detections, but that seems to be more of a reactive than proactive approach. It still does the detection from searches.
On the enterprise side, we use McAfee/Trellix and we’re pretty much glued to them for endpoint security. Why? Nobody else allows you to write custom YARA rules straight to the IPS engine like Trellix does.
Every other vendor only allows you to use rules they have defined for you and doesn’t give you that low level access. It’s frustrating because their support is dogshit too, but my company has niched itself into a corner.
Additional reason along with what others have said: my mom has been massively consuming books on Prologue. It’s easier to keep her on a single app than to switch her to ABS or Plappa.
I’ve been using Plappa while waiting for Prologue. Pretty solid app so far.
It’s been the Prologue developer’s next biggest priority on their roadmap. Apparently it’s coupled with the v4 Swift rewrite. I just saw it in the subreddit posted about 3 weeks ago.
ABS TestFlight is constantly full is one reason lol.
I’m looking forward to when Prologue v4 comes out and finally supports ABS. After that, I can finally move myself and my family to ABS and I’ll be one step closer to removing Plex.
Yep, you forgot Palo Alto’s GlobalProtect telemetry allowing for remote code execution. A perfect 10.
I still think one of the craziest examples of multiplatform streaming being required is from Pokemon. They have a whole guide on how to watch every season:
https://www.pokemon.com/us/animation/where-to-watch-pokemon-episodes-movies
Edit: oh, and this is AFTER the death of Pokemon TV, their own streaming service lol.
Agreed, we’ve been playing AV and secret checks have been great. Using a recall knowledge check and crit failing is fun, because you get fake information and have to work with that knowledge.
Tried from Mullvad’s exit nodes in HK and Singapore. Didn’t seem to work.
And miss out on all the struggle and suffering of figuring out how to build a compose file over many hours? Who would want to miss out on that?
All kidding aside, I had not heard about dockge. I might give it a try, see what it can do with my existing compose file.
It’s also been archived for a year with no revamp in sight.