OAIC 2026 / Full talk / 25:19

Your EDR Has Boundary Issues

Name: Your EDR Has Boundary Issues
Uploaded: 2026-10-17T12:35:40-07:00
Duration: 25 min 19 s
Description: Will Schroeder and Lee Chagolla-Christensen explore the local static malware models and feature-extraction pipelines inside four commercial EDRs. They discuss automated obfuscation experiments, how results transfer between models, and the role of LLMs and GEPA in searching for effective configurations.

Evaluating local malware models in commercial EDRs

Will Schroeder & Lee Chagolla-Christensen · SpecterOps

About the talk

Will Schroeder and Lee Chagolla-Christensen explore the local static malware models and feature-extraction pipelines inside four commercial EDRs. They discuss automated obfuscation experiments, how results transfer between models, and the role of LLMs and GEPA in searching for effective configurations.

Recorded at Offensive AI Con 2026.

Watch on YouTube ↗

The next wave of offensive AI