Hacker News Reader

Comment by ThinkBeat | Hacker News Reader

I am not familiar with the term.

"Universal agent" is some form of antivirus, ransomware software like ESET, or McAffee?

Or does the universal agent listen to "endpoint security, somebody elses antivirus that reports what it finds up the chain?

And the next step is that the data gets to the server, is parsed, stored etc and present on a nice gui?

"Someone proped computer3 with a known exsploit at (somedatetime)" ?

View on HN

They're implying that you have a single agent which does the EDR (antivirus) and SIEM (logging) functionality instead of two separate agents. This is becoming more commonplace throughout the security industry as multiple agents can be burdensome from both a security and maintenance perspective.

Agreed about the security and maintenance perspective perspective.

Does that then mean we can conclude that the agent that comes with this product is a fully fledged endpoint security like ESET/MCaffe etc?

I am wondering about this since a top notch free and open source antivirus and malware program would be super useful and cheap

I haven't used it, and can't speak to it being "top notch", but they're advertising it as a fully fledged endpoint product that even includes some things like FIM (File integrity Monitoring), which are usually only available as expensive add-ons or additional modules with traditional security products like McAfee.

If it were me, I would compare and contrast it's features and support with commercial offerings and see which one you feel the most comfortable with. There's a lot at stake when it comes to security. It's probably best not to let your decisions be 100% about up-front cost.

As far as I know it's just a node exporter, similar to prometheues node-exporter

Reply on news.ycombinator.com