this post was submitted on 19 Jul 2024
523 points (99.2% liked)

Technology

59594 readers
3400 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] catastrophicblues@lemmy.ca 3 points 4 months ago (1 children)

What do you use? I’d be interested in that sort of thing

[–] greybeard@lemmy.one 5 points 4 months ago (1 children)

SentinelOne. They are more reseller/MSP friendly, but the product is very similar to CrowdStrike.

[–] dditty@lemm.ee 2 points 4 months ago (1 children)

We also use S1 and while it does often flag false positives, that's a whole heck of a lot better than the alternative. Also I have not noticed it being very resource intensive.

[–] greybeard@lemmy.one 3 points 4 months ago

It's overhead is more subtle than task manager can tell. Because of all its watching and monitoring, it slows down applications themselves. Task take longer. Sometime it is by a trivial amount, but I've been able to measure a notable difference in some task with and without S1, even if task manager says all is well.