These are tools discussed Learning Ransomware Response & Recovery by W. Curtis Preston and Dr. Mike Saylor. Browse the list of all tools or get the book.
Inclusion in this directory does not indicate endorsement.
If you see a missing tool, leave a comment!
These tools provide endpoint protection, detection, and management capabilities to monitor, secure, and respond to threats on workstations, servers, and mobile devices across the organization.
EDR/XDR Platforms (Commercial)
- CrowdStrike – https://www.crowdstrike.com – Enterprise XDR/EDR with real-time threat hunting
- SentinelOne – https://www.sentinelone.com – AI-powered XDR/EDR platform
- Stellar Cyber – https://stellarcyber.ai – Open XDR platform with AI-driven analysis
- Huntress – https://www.huntress.com – EDR focused on SMB market
- Microsoft Defender – https://www.microsoft.com/en-us/security/business/endpoint-security/microsoft-defender-endpoint – Endpoint detection and response
Endpoint Management
- Microsoft AppLocker – https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/applocker/applocker-overview – Application whitelisting tool (Included with Windows)
- Microsoft InTune – https://www.microsoft.com/en-us/security/business/microsoft-intune – Cloud-based endpoint management
- Kaseya – https://www.kaseya.com – Remote monitoring and management platform
- ManageEngine – https://www.manageengine.com – IT management software suite