Add Attivo & Attivo products to EDRData
riskydissonance opened this issue · comments
RiskyDissonance commented
Add Attivo & Attivo products to EDRData
Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.
riskydissonance opened this issue · comments