Yuto 筆記、writeups 和部落格文章們https://blog.yuto0226.dev/https://blog.yuto0226.dev/blog/edr-design-from-detection-to-incident-pipeline-structure/https://blog.yuto0226.dev/blog/edr-design-from-detection-to-incident-pipeline-structure/本文以實務攻防視角，簡單整理 EDR 從原始事件到 Incident 的完整流程，涵蓋資料來源信任分級、Detection 與 Tag 設計、告警關聯、SQLite 本地可靠性、Agent 與 Cloud 分工，以及效能與誤報間的取捨。同時對照 MDE、CrowdStrike、SentinelOne、Elastic 的做法，總結一套能持續調整的設計原則。Mon, 09 Mar 2026 00:00:00 GMThttps://blog.yuto0226.dev/blog/pwntools-template/https://blog.yuto0226.dev/blog/pwntools-template/Thu, 19 Feb 2026 00:00:00 GMThttps://blog.yuto0226.dev/blog/a-quick-dive-into-peb-walk/https://blog.yuto0226.dev/blog/a-quick-dive-into-peb-walk/Sat, 21 Jun 2025 19:31:00 GMThttps://blog.yuto0226.dev/blog/hack-the-box-season7-planning/https://blog.yuto0226.dev/blog/hack-the-box-season7-planning/Wed, 04 Jun 2025 16:24:56 GMThttps://blog.yuto0226.dev/blog/hack-the-box-starting-point-responder/https://blog.yuto0226.dev/blog/hack-the-box-starting-point-responder/Wed, 28 May 2025 14:34:45 GMThttps://blog.yuto0226.dev/blog/uva-12442-forwarding-emails/https://blog.yuto0226.dev/blog/uva-12442-forwarding-emails/Sun, 27 Apr 2025 17:12:12 GMThttps://blog.yuto0226.dev/blog/pwnabletw-start-writeup/https://blog.yuto0226.dev/blog/pwnabletw-start-writeup/Wed, 23 Apr 2025 16:20:30 GMThttps://blog.yuto0226.dev/blog/thjcc-ctf-2025-writeup/https://blog.yuto0226.dev/blog/thjcc-ctf-2025-writeup/Tue, 22 Apr 2025 02:45:00 GMT