ÄϹ¬NGÓéÀÖÐû²¼¶À¼ÒÊ×´´Êý¾ÝËæÄîÍ·ÖÆµÄÐÂÒ»´úÖÕ¶ËÇå¾²²úÆ·¡ª¡ªÌì«‘EDR

Ðû²¼Ê±¼ä 2020-09-28
Êý×Ö¾­¼Ãʱ´ú£¬£¬£¬£¬ £¬£¬Êý¾Ý¡¢ÐÅÏ¢³ÉΪ¡°Ð»ƽ𡱣¬£¬£¬£¬ £¬£¬¶øÈëÇÖÊÖ¶ÎÒ²Öð½¥×ª±äΪԽ·¢¾«×¼²¢ÇÒ´øÓнÏÇ¿µÄÉÌҵĿµÄºÍ¾­¼ÃÀûÒæ£¬£¬£¬£¬ £¬£¬¹Å°åÖÕ¶ËÇå¾²²úÆ·Æ£ÓÚÓ¦¶Ô ¡£¡£


Ëæ×ÅÐÂÐÍÍøÂçÇå¾²Íþв²ã³ö²»Ç£¬£¬£¬ £¬£¬¹Å°åÖÕ¶ËÇå¾²ÎÞ·¨×öµ½¿ìËÙ·¢Ã÷δ֪Íþв£¬£¬£¬£¬ £¬£¬¿´ÇåÍþвµÄȪԴ ¡£¡£Òò´Ë£¬£¬£¬£¬ £¬£¬ÐèÒªÉý¼¶ÐµÄÖÕ¶ËÇå¾²·À»¤ÊÖÒÕ£¬£¬£¬£¬ £¬£¬ÊµÏÖ¶ÔÖÕ¶ËÍþвµÄ¾«×¼·À»¤ºÍÓÐÓô¦Öóͷ£ ¡£¡£


¿ËÈÕ£¬£¬£¬£¬ £¬£¬ÄϹ¬NGÓéÀÖÐû²¼Á˶À¼ÒÊ×´´Êý¾ÝËæÄîÍ·ÖÆµÄÐÂÒ»´úÖÕ¶ËÇå¾²²úÆ·¡ª¡ªÌì«‘EDR£¬£¬£¬£¬ £¬£¬²»µ«¿ÉΪ¿Í»§½¨ÉèÇå¾²¿É¿ØµÄÖÕ¶ËÇå¾²·À»¤ÏµÍ³£¬£¬£¬£¬ £¬£¬Èÿͻ§¿´µ½¡¢¿´Çå¡¢¿´È«Çå¾²Íþв£¬£¬£¬£¬ £¬£¬Í¬Ê±Ìá³öµÄ¡°Êý¾ÝËæÄîÍ·ÖÆ¡±Ò²ÎªÌì«‘EDRÊÖÒÕµÄδÀ´Éú³¤Ö¸Ã÷Æ«Ïò ¡£¡£


ºá¿Õ³öÉúEDR£¬£¬£¬£¬ £¬£¬½£Ö¸ÏÂÒ»¸ö°ÙÒÚÃÀ½ð¼¶Êг¡


×Ô2014ÄêÆð£¬£¬£¬£¬ £¬£¬EDRÊÖÒÕ±»ÁÐÈëGartnerµÄ¡°10´óÊÖÒÕ¡±Ö®ÁУ¬£¬£¬£¬ £¬£¬²¢Ò»Á¬6ÄêÎȾÓÊ®´óÊÖÒÕÐÐÁÐÖÁ½ñ ¡£¡£Æ¾Ö¤GartnerÕ¹Íû£¬£¬£¬£¬ £¬£¬Ëæ×ÅEDR²úÆ·¹¦Ð§µÄÒ»Ö±¸»ºñ£¬£¬£¬£¬ £¬£¬ÔÚÈ«Çò¹æÄ£ÄÚEDR²úÆ·ÖÁÉÙ±£´æ5±¶ÒÔÉϵÄÔöÌí¿Õ¼ä£¬£¬£¬£¬ £¬£¬Òò´Ë½«»áÊÇÖÕ¶ËÇå¾²ÁìÓòÏÂÒ»¸ö°ÙÒÚÃÀ½ð¼¶Êг¡ ¡£¡£


ÔÚÎ÷Å·Êг¡£¬£¬£¬£¬ £¬£¬EDRÊÖÒÕÒѾ­Èç»ðÈçݱµÄÉú³¤×³´ó£¬£¬£¬£¬ £¬£¬×¨×öEDR²úÆ·µÄcrowdstrike¸üÊÇ´ÓÊ×´´ÆóÒµÉú³¤ÎªÖÕ¶ËÇå¾²ÈüµÀÉϵÄ×ÅÃû³§ÉÌ£¬£¬£¬£¬ £¬£¬ÒѾ­ÓÚÈ¥ÄêÀÖ³ÉIPO²¢¼á³Ö¸ßËÙÔöÌí£¬£¬£¬£¬ £¬£¬ÆäÉú³¤Ô¶¾°¸üÊDZ»×ÊÔ´Êг¡¿´ºÃ£¬£¬£¬£¬ £¬£¬ÊÇÏÖÔÚÃÀ¹É¹ÀÖµ×î¸ßµÄÍøÂçÇå¾²ÆóÒµ ¡£¡£


³ÁÏÂÐÄ£¬£¬£¬£¬ £¬£¬´òÄ¥Ò»¿î¾­ÊÜסÓû§Ä¥Á·µÄEDR


×÷Ϊ¾ß±¸×ÊÉîÍøÂçÇå¾²ÂÄÀúµÄ³§ÉÌ£¬£¬£¬£¬ £¬£¬ÄϹ¬NGÓéÀÖÔÚÖÕ¶ËÇå¾²·½ÃæµÄÂÄÀú»ýÀÛÒÑÓÐÊ®ÆßÄ꣬£¬£¬£¬ £¬£¬Ó¦¸ÃÊǺÜÔç¾Í¾ß±¸ÍƳöEDR²úÆ·µÄÄÜÁ¦£¬£¬£¬£¬ £¬£¬ÎªÊ²Ã´Ìì«‘EDR²úÆ·×î½ü²ÅÕýʽÐû²¼£¿£¿£¿£¿£¿


¶Ô´Ë£¬£¬£¬£¬ £¬£¬ÄϹ¬NGÓéÀÖÖÕ¶ËÇå¾²²úÆ·Ïß×Ü˾ÀíÍòíµ²©Ê¿ÌåÏÖ£º¡°EDRµÄ¿´·¨×îÔçÊÇÓÉGartnerÔÚ2013ÄêÌá³öµÄ£¬£¬£¬£¬ £¬£¬Ö÷ÒªÃæÏòÎ÷Å·Êг¡ ¡£¡£ÓÉÓÚÎÒ¹úÍøÂç»ù´¡ÉèÊ©½¨Éè½Ú×àÓëÍâÑó±£´æ²î±ð£¬£¬£¬£¬ £¬£¬EDR´Ó2018Äê²Å×îÏÈÔÚº£ÄÚÊг¡ÕæÕý±»ÖØÊÓ£¬£¬£¬£¬ £¬£¬Ö÷ÒªÆõ»úÊÇÒÔÓÀºãÖ®À¶Îª´ú±íµÄÀÕË÷Èí¼þ·ºÆð£¬£¬£¬£¬ £¬£¬¿ÉÒÔÈÆ¹ý¹Å°åµÄEPPºÍɱ¶¾Èí¼þ£¬£¬£¬£¬ £¬£¬Òò´ËEDRÊÖÒÕ²Å×îÏȱ»ÆÕ±éÖØÊÓ ¡£¡£


¡°ÄϹ¬NGÓéÀÖ¼¯ÍÅ×öÖÕ¶ËÇå¾²Ò²ÓÐÊ®ÆßÄêÁË£¬£¬£¬£¬ £¬£¬ÏÖÔÚÒѾ­¾ß±¸½ÏÁ¿ÍêÉÆµÄÖն˲úÆ·Ïߣ¬£¬£¬£¬ £¬£¬º­¸ÇÁ˰üÀ¨ÖÕ¶Ë×¼Èë¡¢×ÀÃæÖÎÀí¡¢É±¶¾¡¢Êý¾Ý·Àй¶¡¢Îĵµ¼ÓÃܵȶà¸ö²úÆ·£¬£¬£¬£¬ £¬£¬ËäÈ»ÍêÈ«¿ÉÒÔÏñÆäËûһЩÓÑÉÌÒ»Ñù£¬£¬£¬£¬ £¬£¬»ùÓڹŰåµÄÖÕ¶ËÇå¾²ÊÖÒÕºÜ¿ìµØ°ü×°³öÒ»¸öEDR²úÆ·²¢ÂíÉÏÍÆÏòÊг¡ ¡£¡£Ã»ÓÐÕâÑù×öÊÇÓÉÓÚÄϹ¬NGÓéÀÖ³õÐÄҪȥ¿ª·¢Éè¼ÆÒ»¿îÄܹ»ÔÚÓû§ÏÖ³¡½â¾öÏÖʵÎÊÌ⣬£¬£¬£¬ £¬£¬Äܹ»¾­ÊÜסÓû§Ä¥Á·µÄ¡¢¿ÉÐÅÈεÄÖÕ¶ËÇå¾²²úÆ· ¡£¡£Òò´Ë£¬£¬£¬£¬ £¬£¬ÔÚ²úÆ·¿ª·¢Àú³ÌÖУ¬£¬£¬£¬ £¬£¬ÎÒÃÇÁ¬ÏµÁ˺£ÄÚÍâ¶ÔEDR²úÆ·µÄ½ç˵ÒÔ¼°Óû§µÄÍ´µãÐèÇ󣬣¬£¬£¬ £¬£¬²¢ÂÄÀúÁ˶Լܹ¹µÄÖØ¸´ÂÛÖ¤ÓëÍÆÇ㬣¬£¬£¬ £¬£¬Í¬Ê±ÎªÁËÌá¸ß²úÆ·µÄÊÊÓÃÐÔ¡¢Í¨ÓÃÐÔ£¬£¬£¬£¬ £¬£¬ÔÚÎÒÃǼ¯ÍÅÄÚ²¿ºÍÐí¶àÐÐÒµÓû§×öÁ˳ä·ÖµÄÊÔµãÊÂÇéÖ®ºó£¬£¬£¬£¬ £¬£¬½³ÐÄ´òÄ¥µÄÌì«‘EDR²ÅµÃÒÔÎÊÊÀ ¡£¡£ÏÖÔÚ£¬£¬£¬£¬ £¬£¬Ìì«‘EDRÒѾ­ÔÚ¸÷¼¶Õþ¸®µ¥Î»¡¢ÆóÒµ¡¢½ðÈÚ¡¢µçÁ¦µÈÐÐÒµÒÑͶÈëʹÓà ¡£¡£¡±  


Óë¹Å°åÊÖÒÕÊÖ¶ÎÏà±È£¬£¬£¬£¬ £¬£¬EDRµÄÖ÷ÒªÓÅÊÆÊÇÄܹ»Í¨¹ýÖն˵ÄÒ»Á¬¼à²â£¬£¬£¬£¬ £¬£¬´ÓһϵÁÐÕý³£Êý¾ÝÖз¢Ã÷Òì³£ÐÐΪºÍδ֪Íþв ¡£¡£Í¬Ê±»ùÓÚ´ó×ÚµÄÖÕ¶ËÏßË÷Êý¾ÝÊÕÂÞºÍÉÏÏÂÎÄÆÊÎö£¬£¬£¬£¬ £¬£¬ÊµÏÖÍþвµÄÔ´Í·×·ËÝ£¬£¬£¬£¬ £¬£¬Ìî²¹ÏÖÓÐÇå¾²ÎÊÌâÎó²îºÍ·ÀÓùÄÜÁ¦µÄȱ·¦ ¡£¡£


¶À¼ÒÊ×´´¡°Êý¾ÝËæÄîÍ·ÖÆ¡±


ÄϹ¬NGÓéÀÖÌì«‘EDRͨ¹ý²Î¿¼Gartner¶ÔEDR²úÆ·µÄ½ç˵ºÍÐÎò£¬£¬£¬£¬ £¬£¬²¢Á¬Ïµº£ÄÚÓû§¶ÔÖÕ¶ËÇå¾²·À»¤µÄÏÖʵÐèÇ󣬣¬£¬£¬ £¬£¬Á¢ÒìÐÔµØÌá³öÁË»ùÓÚ¡°Êý¾ÝËæÄîÍ·ÖÆ¡±µÄÖն˸߼¶Íþв¼ì²âÓëÏìÓ¦ÊÖÒÕõè¾¶ ¡£¡£


Êý¾ÝËæÄîÍ·ÖÆ×î´óµÄ×÷ÓÃÊÇÈÃÖÕ¶ËÊý¾Ý¾ÙÐÐÔ½·¢¸ßЧµØÊ¹ÓúÍÍÚ¾òÊý¾ÝÖдøÓÐÍþвµÄÊôÐÔ£¬£¬£¬£¬ £¬£¬ÔÚÕûÌå»úÖÆÖС°Ë涯¡±Êǽ¹µã²¿·Ö ¡£¡£ÔÚ¿ØÖÆÏµÍ³ÖÐÈô¸ø¶¨µÄÊäÈëÐźÅÊÇÔ¤ÏÈδ֪ÇÒËæÊ±¼äת±äµÄ£¬£¬£¬£¬ £¬£¬²¢ÇÒϵͳµÄÊä³öÁ¿ËæÊäÈëÁ¿µÄת±ä¶ø×ª±äÕâÖÖϵͳ³ÆÎªË涯ϵͳ ¡£¡£¿£¿£¿£¿£¿ìËÙ¸ú×ÙºÍ׼ȷ¶¨Î»ÊÇËæ¶¯ÏµÍ³µÄÁ½¸öÖ÷ÒªÊÖÒÕÖ¸±ê ¡£¡£


ÖÕ¶ËÖ»ÒªÔÚÔËÐÐÀú³ÌÖУ¬£¬£¬£¬ £¬£¬Êý¾Ý¾Í»áÒ»Ö±±¬·¢£¬£¬£¬£¬ £¬£¬¿ÉÊÇÐÅÏ¢²»ÊÇÒ»³ÉÎȹ̵Ä£¬£¬£¬£¬ £¬£¬EDR»áËæ×ÅÊý¾ÝµÄת±äÒÔ¼°Çå¾²ÍþвµÄת±äÀ´¶¯Ì¬µ÷½â·À»¤Ä£Ê½£¬£¬£¬£¬ £¬£¬Ëæ×Ųî±ð³¡¾°ÐèÇ󣬣¬£¬£¬ £¬£¬ÎÞаŲÓüì²â¡¢ÆÊÎö¡¢ÏìÓ¦¡¢ËÝÔ´µÈ²î±ðÒýÇæ£¬£¬£¬£¬ £¬£¬¸øÖÕ¶ËÌṩ×îÆõºÏ²¢ÇÒ²»ÖÐÖ¹µÄÇå¾²ÄÜÁ¦£¬£¬£¬£¬ £¬£¬ÊµÏÖ¶ÔÖÕ¶ËÍþвµÄ¾«×¼¶¨Î» ¡£¡£


ÁíÍ⣬£¬£¬£¬ £¬£¬Ìì«‘EDR¼ì²âÒýÇæ»áƾ֤ÊäÈëÊý¾ÝµÄά¶ÈºÍÄÚÈÝת±äÀ´¶¯Ì¬¼ÓÔØ²î±ðµÄÆ¥ÅäÄ£×Ó£¬£¬£¬£¬ £¬£¬Êä³ö²î±ðµÄÍþвЧ¹û ¡£¡£ÕâÖÖ»úÖÆ²»µ«ÓÐÀûÓÚ½µµÍÖն˵Ä×ÊÔ´Õ¼Ó㬣¬£¬£¬ £¬£¬Í¬Ê±Ò²ÄÜÌáÉýÆÊÎöÖÐÐĵÄÔËËãЧÂÊ£¬£¬£¬£¬ £¬£¬ÈÃÌì«‘EDR¾ß±¸ÁËÒ»·ÝԭʼÊý¾Ý¿ÉÒÔ²¢ÐжàÖÖÇå¾²Íþв¼ì²âµÄÄÜÁ¦£¬£¬£¬£¬ £¬£¬ÊµÏÖ¶ÔÍþвµÄ¿ìËÙ¼ì²âÓë·¢Ã÷ ¡£¡£


±ÈÕչŰåÇå¾²²úÆ·ÖÐʹÓõÄÀú³Ì»¯¼ì²âÄ£×Ó£¬£¬£¬£¬ £¬£¬Ìì«‘EDRÔÚÉè¼ÆÖнÓÄÉÁËËæ¶¯ÏµÍ³µÄÀíÄ£¬£¬£¬ £¬£¬ËæÊý¾Ýת±ä¶ø¶¯£¬£¬£¬£¬ £¬£¬ÊµÏÖÁËÖÕ¶ËÍþвµÄ¿ìËÙ¸ú×ÙºÍ׼ȷ¶¨Î» ¡£¡£


ÒµÄÚÁìÏȼ«ÖÂÖÕ¶Ë£ºÖÂÇá¡¢Ö¼ò¡¢ÖÂÓÃ


ÄϹ¬NGÓéÀÖÌì«‘EDRÍÆ³öÁËÒµÄÚÁìÏȵĿͻ§¶ËÐÎʽ£¬£¬£¬£¬ £¬£¬ÖÂÇá¡¢Ö¼ò¡¢ÖÂÓÃÈý´óģʽЭÁ¦½â¾öÓû§µÄÍ´µãÐèÇó ¡£¡£


1¡¢ÖÂÇáģʽ£º¿Í»§¶Ë×îСÖÁ500K£¬£¬£¬£¬ £¬£¬ÔËÐнöÐèÕ¼Óü¸Ê®Õ×ÄÚ´æÒÔ¼°²»µ½1%µÄCPU£¬£¬£¬£¬ £¬£¬ÏÕЩ¿ÉºöÂÔ²»¼Æ ¡£¡£


2¡¢Ö¼òģʽ£ºÁ¢Òì½ÓÄÉÎÞHOOK¡¢ÎÞÇý¶¯Éè¼ÆÀíÄ£¬£¬£¬ £¬£¬²»»á¶Ô²Ù×÷ϵͳÎȹÌÐÔÔì³ÉÈκÎÓ°Ï죬£¬£¬£¬ £¬£¬³¹µ×¶Å¾øËÀ»ú¡¢À¶ÆÁ¡¢¿¨¶ÙµÈÎÊÌâ ¡£¡£


3¡¢ÖÂÓÃģʽ£º½ÓÄÉÎÞÓû§¡¢²å¼þ»¯Éè¼ÆÄ£Ê½£¬£¬£¬£¬ £¬£¬¿É»ùÓÚ¡°ºÚºÐ×Ó¡±Ä£Ê½¾ÙÐÐÊÂÇ飬£¬£¬£¬ £¬£¬¼æÈÝËùÓÐÓ¦ÓÃÈí¼þ£¬£¬£¬£¬ £¬£¬²¢¾ß±¸ÈÛ¶Ï»úÖÆ ¡£¡£


ÖµµÃÒ»ÌáµÄÊÇ£¬£¬£¬£¬ £¬£¬Ìì«‘EDR¿Í»§¶Ë²»µ«ÔÚWindowsÉÏÊÊÓ㬣¬£¬£¬ £¬£¬Í¬Ê±ÔÚÖ÷Á÷LinuxȫϵÁС¢Ö÷Á÷¹ú²ú»¯£¬£¬£¬£¬ £¬£¬Ö÷Á÷µÄÐéÄ⻯É϶¼Í¬ÑùÊÊÓ㬣¬£¬£¬ £¬£¬¿ÉÒÔ½«ÄÚÍøËùÓÐÖն˾ÙÐÐͳһÖÎÀí£¬£¬£¬£¬ £¬£¬ÏºÃÇ徲ͳ¹Ü¡°Ò»ÅÌÆå¡± ¡£¡£


̸¼°EDR²úÆ·µÄδÀ´Éú³¤Ç÷ÊÆ£¬£¬£¬£¬ £¬£¬Íòíµ²©Ê¿ÌåÏÖ£º¡°Óû§µÄÕæÊµÐèÇóÊǰÚÔÚÄǵġª¡ª·¢Ã÷δ֪Íþв¡¢¶ÔÇå¾²ÍþвÊÂÎñËÝÔ´µÄÄÜÁ¦ÒªÇóºÜÊÇÃ÷È·ÇÒÐèÇóÁ¿ºÜ´ó£¬£¬£¬£¬ £¬£¬ÒÔÊÇÎÒÒÔΪEDRÓкÜÊǺõÄÊг¡Éú³¤¿Õ¼ä£¬£¬£¬£¬ £¬£¬Î´À´ÓкÜÇ¿µÄÉú³¤Çý¶¯Á¦ ¡£¡£¡±


Êý×Ö¾­¼ÃµÄÉú³¤´øÀ´µÄÖն˶àÑù»¯¡¢ÖÇÄÜ»¯¸øEDR²úÆ·´øÀ´Ô½·¢ÁÉÀ«µÄÊг¡ÐèÇó ¡£¡£¿£¿£¿£¿£¿ÉÒÔÔ¤¼û£¬£¬£¬£¬ £¬£¬EDRÊÖÒÕ½«³ÉΪ¶ËµãÇå¾²·ÀÓùµÄÖ÷Á÷ÊÖÒÕ£¬£¬£¬£¬ £¬£¬²¢Õ¼ÓÐÖ÷Á÷Êг¡ ¡£¡£Î´À´£¬£¬£¬£¬ £¬£¬ÄϹ¬NGÓéÀÖ»á¼ÌÐøÉî¸ûÖÕ¶ËÇå¾²ÁìÓò£¬£¬£¬£¬ £¬£¬ÒÔÊÖÒÕÁ¢ÒìΪÒýÁ죬£¬£¬£¬ £¬£¬ºñ»ý±¡·¢£¬£¬£¬£¬ £¬£¬ÎªÓû§ÐÞ½¨¡°Çå¾²×îºóÒ»¹«À¼áʵ·ÀµØ£¬£¬£¬£¬ £¬£¬Ïòµ¼ÖÕ¶ËÇå¾²ÐÐÒµ¸ßËÙÎȹÌÉú³¤ ¡£¡£