tag: Secops-Tooling · 1 items
- Engineer — Learn: Interesting open-source agent that couples host-learning sensors with an on-device small model for containment; worth evaluating for Linux fleet coverage, but no patch or config change required today.
- SOC/IR — Learn: New OSS IR agent with zero-token sensors and automated containment under a root policy is worth a lab evaluation to see if it complements existing EDR coverage on Linux servers.
- Leader — Skip