The Skeptic's Guide to Using XDR to Get Zero Trust
summary
Claims that XDR is a data lake plus ML/AI and built-in response drive the talk: XDR must ingest EDR, network, email, cloud and CASB/API telemetry, not just rebrand EDR or noisier SIEMs, because MITRE shows attackers do low‑and‑slow lateral moves and 97% of attacks touch email. Zero Trust requires continuous visibility and posture over time, uses ZTNA/SASE for access (with SASE is a subset of Zero Trust), and warns there is no single vendor soup‑to‑nuts solution today.
AI-written summary · about
chapters (12)
- 0:00XDR and Zero Trust intro
- 2:10Why XDR emerged
- 7:30API integration challenges
- 10:57What XDR truly consists of beyond the hype
- 18:25Skeptical view of XDR
- 19:08Zero Trust origins
- 24:11Visibility in Zero Trust
- 27:11Flipping from trust-but-verify to verify-then-trust
- 31:01Zero Trust pillars
- 33:50SASE for Zero Trust
- 36:22XDR and Zero Trust link
- 38:58Q&A
related talks
43mMaking Sense of a Confusing Detection and Response Solutions Landscape
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
47mOpen XDR: A Strategy for Evolving Security Needs
50mWhy Extended Detection and Response (XDR) Must Unite the Industry
18mRedefining Cybersecurity: Harnessing Zero Trust Architecture for a Resilient Future
45mZero Trust: Getting to Step One..and What to Do When You Get There
31mAttacking Zero Trust Designs in 2021
41mCutting Through the Noise of XDR – Are Service Providers an Answer?