diff --git a/README.md b/README.md index 4266849..42c641f 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # patdown -> EDR/XDR (Endpoint Detection & Response) fingerprinting utility useful for predicting defense mechanisms in use on remote systems. +> Predicts and identifies the presence of EDR/XDR solutions on remote networks

@@ -8,7 +8,9 @@

## Abstract -Patdown probes a network's DNS servers to determine whether they have resolved domains associated with various EDR/XDR solutions. +patdown is an EDR/XDR *(Endpoint Detection & Response)* fingerprinting utility useful for predicting defense mechanisms in use on a network. + +This is achieved via probing a network's DNS servers to determine whether they have resolved domains associated with various EDR/XDR solutions. **Example**: if a network's resolver has `assets-public.falcon.crowdstrike.com` in its cache, chances are the '*CrowdStrike Falcon*' EDR solution is present somewhere on the network.