The EDR Was Running. The Ransomware Still Won.

Dave Chronister has been doing penetration testing and incident response since 2007 — back when Fortune 500 CIOs called it a novel concept. In the years since, he's walked into breached environments where the EDR was running, the MDR was installed, the SOC 2 audit had passed, and none of it mattered. This conversation covers the gap between what companies think they bought and what they actually…