Anton and The Great XDR Debate, Part 3 | by Anton Chuvakin | Anton on Security | Medium

TLDR: no, this post still does not contain the Ultimate Answer for XDR, Life and Everything Question. Moreover, I don’t think anything ever will. While we discuss XDR, the market forces change the definitions, vendors pivot away, analysts ponder, customers cry… well, the cyber-usual. To start, I’ve had many conversations about XDR recently. Some were the ones where I sought answers, while others were where I sought questions and some were where people sought answers from me. Now, I am well aware that this debate does not really touch the needs of many real security practitioners. Somebody asked me on social media why I am so obsessed with XDR. To me, the answer is I need clarity in technologies that we deploy. The clarity is essential to match products to requirements, to compare tools, and to cover the gaps in detection and response posture (and in security in general). As you remember from my excellent Part 1 and from my — yeah, I know — mediocre Part 2, XDR remains a mystery to a wh

TLDR: no, this post still does not contain the Ultimate Answer for XDR, Life and Everything Question. Moreover, I don’t think anything ever will. While we discuss XDR, the market forces change the definitions, vendors pivot away, analysts ponder, customers cry… well, the cyber-usual. To start, I’ve had many conversations about XDR recently. Some were the ones where I sought answers, while others were where I sought questions and some were where people sought answers from me. Now, I am well aware that this debate does not really touch the needs of many real security practitioners. Somebody aske