they're correct, all the others are similarly shit
sentinelone, tanium, guardicore, defender endpoint, delina
all running as root (or worse), sucking up absurd amounts of resources, often more than the software running on the machine (but advertised as "LOW IMPACT")
they also cause reliable software to break due to bugs in e.g. their EBPF
also often serialises all network and disk on the machine through to one single thread (so much for multi-queue NVMe/NICs)
the risk and compliance attitude that results in this corporate mandated malware being required needs to go
this software creates more risk than it prevents
sentinelone, tanium, guardicore, defender endpoint, delina
all running as root (or worse), sucking up absurd amounts of resources, often more than the software running on the machine (but advertised as "LOW IMPACT")
they also cause reliable software to break due to bugs in e.g. their EBPF
also often serialises all network and disk on the machine through to one single thread (so much for multi-queue NVMe/NICs)
the risk and compliance attitude that results in this corporate mandated malware being required needs to go
this software creates more risk than it prevents