From bfd20e8d286dff38e458622c608fd516a300954d Mon Sep 17 00:00:00 2001 From: delorean Date: Sun, 18 Feb 2024 12:43:09 -0600 Subject: [PATCH] and you better read the README --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 4266849..42c641f 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # patdown -> EDR/XDR (Endpoint Detection & Response) fingerprinting utility useful for predicting defense mechanisms in use on remote systems. +> Predicts and identifies the presence of EDR/XDR solutions on remote networks

@@ -8,7 +8,9 @@

## Abstract -Patdown probes a network's DNS servers to determine whether they have resolved domains associated with various EDR/XDR solutions. +patdown is an EDR/XDR *(Endpoint Detection & Response)* fingerprinting utility useful for predicting defense mechanisms in use on a network. + +This is achieved via probing a network's DNS servers to determine whether they have resolved domains associated with various EDR/XDR solutions. **Example**: if a network's resolver has `assets-public.falcon.crowdstrike.com` in its cache, chances are the '*CrowdStrike Falcon*' EDR solution is present somewhere on the network.