base on This project aims to compare and evaluate the telemetry of various EDR products. # EDR Telemetry <p align="center"> <img src="./images/logo_new.png" width="200" alt="EDR Telemetry Logo"> </p> <div align="center"> [](https://www.edr-telemetry.com) [](https://github.com/tsale/EDR-Telemetry/wiki/FAQ) [](http://creativecommons.org/licenses/by-nc/4.0/) [](https://github.com/tsale/EDR-Telemetry/stargazers) </div> ## 📖 About A comprehensive comparison of telemetry features from EDR products and endpoint agents like [Sysmon](https://learn.microsoft.com/en-us/sysinternals/downloads/sysmon). This project enables security practitioners to evaluate telemetry capabilities while promoting vendor transparency. 🌐 **[Visit our Website](https://www.edr-telemetry.com)** for the complete comparison and analysis. 📝 Read more about this project in our [initial release blog post](https://detect.fyi/edr-telemetry-project-a-comprehensive-comparison-d5ed1745384b?sk=b5aade1de1afbabf687620a12aa7a581). ## 🎯 Key Features - Comprehensive telemetry comparison across multiple EDR solutions - Detailed scoring system for feature evaluation - Regular updates to reflect the latest capabilities - Community-driven contributions and verification ## 📊 Telemetry Comparison Visit our [EDR Telemetry Comparison Table](https://www.edr-telemetry.com) to see: - Feature-by-feature comparison - Detailed scoring metrics - Implementation status - Latest updates ## 🤝 Contributing We welcome contributions! Please check our [Contribution Guidelines](https://www.edr-telemetry.com/contribute) for details on how to get involved. ## ⚖️ Scoring System Our evaluation script assigns scores based on feature implementation: - ✅ Yes: 1.0 - ⚠️ Partially: 0.5 - 🎚️ Via EnablingTelemetry: 1.0 - 🪵 Via EventLogs: 0.5 - ❌ No: 0.0 - ❓ Pending Response: 0.0 View the complete [scoring breakdown](https://www.edr-telemetry.com/scores) on our website. ## ⚠️ Disclaimer The data presented reflects only the telemetry capabilities of each product, not their detection or prevention capabilities. For more details, please visit our [FAQ page](https://www.edr-telemetry.com/faq). ## 📜 License This work is licensed under a [Creative Commons Attribution-NonCommercial 4.0 International License](http://creativecommons.org/licenses/by-nc/4.0/). This means you are free to: - Share — copy and redistribute the material in any medium or format - Adapt — remix, transform, and build upon the material Under the following terms: - **Attribution** — You must give appropriate credit, provide a link to the license, and indicate if changes were made. - **NonCommercial** — You may not use the material for commercial purposes without explicit permission from the author. For commercial use, please [contact us](https://www.edr-telemetry.com/contact). ## ✨ Contributors Wall Thanks to these amazing contributors: <p align="center"> <div style="display: flex; flex-wrap: wrap; justify-content: center; gap: 10px;"> <a href="https://github.com/tsale" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/25332397?v=4" alt="tsale" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/jdu2600" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/53329154?v=4" alt="jdu2600" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/j91321" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/10012872?v=4" alt="j91321" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/mthcht" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/75267080?v=4" alt="mthcht" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/thiboog" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/63599089?v=4" alt="thiboog" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/thomaspatzke" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/1845601?v=4" alt="thomaspatzke" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/xC0uNt3r7hr34t" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/61033168?v=4" alt="xC0uNt3r7hr34t" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/inodee" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/14159692?v=4" alt="inodee" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/alwashali" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/22593441?v=4" alt="alwashali" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/Guzzy711" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/27682662?v=4" alt="Guzzy711" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/joshlemon-uptycs" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/116134008?v=4" alt="joshlemon-uptycs" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/LuKePicci" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/8722358?v=4" alt="LuKePicci" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/maximelb" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/15742543?v=4" alt="maximelb" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/MyPeaches" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/31301492?v=4" alt="MyPeaches" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/nasbench" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/8741929?v=4" alt="nasbench" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/NicolasSchn" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/33519397?v=4" alt="NicolasSchn" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/QueenSquishy" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/113638057?v=4" alt="QueenSquishy" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/Robert-HarfangLab" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/157394511?v=4" alt="Robert-HarfangLab" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/SecurityAura" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/20073832?v=4" alt="SecurityAura" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/alextrender" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/60626919?v=4" alt="alextrender" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/idev" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/76164?v=4" alt="idev" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/johnk3r" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/6247648?v=4" alt="johnk3r" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/pep-un" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/8629097?v=4" alt="pep-un" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> <a href="https://github.com/zbeastofburden" target="_blank" style="text-decoration: none;"> <img src="https://avatars.githubusercontent.com/u/106751557?v=4" alt="zbeastofburden" width="50" height="50" style="border-radius: 50%; display: block; margin: 0;" /> </a> </div> </p> ## Current Primary Maintainers Kostas - [@kostastsale](https://twitter.com/Kostastsale)", Assign "at most 3 tags" to the expected json: {"id":"10610","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"