Crowdstrike & VPNs/Incognito Mode

1

Tails

In the situation you're describing, or any situation where personal safety is involved, it is imperative to work from a controlled endpoint. If a person is using a system with Falcon, or any EDR solution on it, I would consider that endpoint "uncontrolled" from an end-user perspective and the type of privacy required for personal safety could be jeopardized. In an absolute dire situation, something like Tails would work, however, it is technically complex to setup for most users and, this is the real kicker, you are still working from an uncontrolled endpoint where those that are in control could install any software they want to circumvent or bypass the privacy measures you are trying to take.

#Linux #Operating Systems #Linux Distribution 385 social mentions

2

ProtonVPN

Re: VPN... The protection you're describing would prevent an ISP or the network DNS resolvers from seeing the traffic. If a user is on a WiFi network AND is using an endpoint they completely control, this would be adequate protection (assuming DNS leaking is accounted for [I like ProtonVPN]).

#VPN #Cloud VPN #Security 310 social mentions

3

Google

EDR solutions operate as a kernel driver. Because of this, they see that Chrome has asked for a DNS resolution on google.com and record this telemetry point.

#Search Engine #Internet Search #Web Search 3692 social mentions