← Back to the boardNews
Windows Endpoint Security Platform: Inside wesp.sys
Why it’s here: Technical deep-dive on Microsoft's undocumented Windows Endpoint Security Platform, a cybersecurity-policy-relevant effort prompted by the CrowdStrike outage and bearing on the EDR vendor landscape; specialist technical depth is relevant per the rules.
Trace across the boardItem
2d agoElasticWindows Endpoint Security Platform: Inside wesp.sysElastic's analysis of Microsoft's undocumented Windows Endpoint Security Platform finds that its kernel driver wesp.sys is a file system mini-filter that talks to user mode over a filter communication port, with no one-way reply path yet.1 outletCyber3 linked
Connected
3 links- NewsMicrosoft says it "restored service" after major worldwide outageBoth involve Microsoft, CrowdStrike
- NewsARTEX: Agentic AsbestosBoth involve Microsoft, CrowdStrike
- NewsARTEX and beyond: AI-enabled penetration testing platformsBoth involve Microsoft, CrowdStrike
About
- Microsoft
- CrowdStrike