NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cybersecurity
EDR/XDR & Endpoint Telemetry
Master the microscope of the SOC. Learn to leverage EDR/XDR platforms, analyze deep endpoint telemetry, and build high-fidelity detections against fileless and Living-off-the-Land attacks.
Room tasks
1Antivirus vs EDR vs XDR Explained
2What Endpoint Telemetry Actually Captures
3EDR Detection Logic
4Popular EDR Platforms Overview
Frequently Asked Questions
What is the difference between EDR and XDR?
EDR focuses on endpoints, while XDR extends detection and response across endpoints, network, email, identity, and cloud by correlating data from multiple sources.
What is fileless malware?
Fileless malware runs in memory or abuses built-in tools instead of dropping files on disk, which makes it harder for traditional antivirus to detect.
What telemetry does an EDR collect?
EDRs record process creation, network connections, file and registry changes, and logons. Analysts use them to investigate alerts, and this Codelivly room covers them in a free, hands-on format.