Is it just me, or is MDE actually one of the toughest EDRs out there when fully rolled out? I’m not trying to flex I usually slip past most setups with CS without drama. But MDE? Man… it humbles me. I think it’s time to shift my R&D focus and really study this thing.

Why do blue teams always get spicy in engagement briefings when we mention assumed breach?
Like… sorry, we’re not testing your fairy garden we’re testing what happens when the wolves are already inside.

During an authorized in-house red team engagement, the blue team identified the activity, panicked, and ended up getting the red team operator swatted. Fully legit, internal, and authorized—but it still went down like that. Has anyone else experienced this kind of madness?

Looking for tools/apps to create interactive diagrams for Red Team demos, courses, or engagement presentations. Example: a big diagram where clicking parts expands or navigates to another page. Tried Visio & LucidApp—want something more modern. Suggestions?