nitter
Richard Bejtlich ๐พ ๐บ๐ฆ
@taosecurity
22 Mar 2011
Note that sampling variety also helps frustrate evasion, since it takes a real pro to evade all those evidence sources simultaneously.
1
Hal Pomeranz
@hal_pomeranz
23 Mar 2011
Replying to
@taosecurity
@taosecurity
Re: multiple sources-- This has always been one of my take-away's from The Cuckoo's Egg
Mar 23, 2011 ยท 1:50 AM UTC