[Discuss] Crowdstrike

[kentborg at borg.org (Kent Borg)]

On 7/29/26 9:31 AM, Rich Pieri wrote:
> Crowdstrike have almost no competition in the enterprise
> EDR space.

They might well die as DEC did, from being irrelevant. EDR (*Endpoint* 
Detection & Response) isn't where the action is because the traditional 
OS isn't really the endpoint anymore. The new "OS" is the web browser, 
the endpoint is inside the browser. Traditional EDR sitting on the host 
OS doesn't have much visibility into what is going on. They can see 
traffic going by, but it is mostly encrypted. The EDR doesn't know when 
the user has been tricked into typing a password or agreeing to yet 
another confusing OAUTH question, this time from an attacker.

Disclaimer: I don't know the details Crowdstrike's products, but they 
have a dinosaur smell in a market that is changing VERY fast.


-kb