---
title: How to detect and defend against EDR bypass techniques
description: Jan Kaastrup explains how to defend against EDR bypass techniques, providing seven clear recommendations for organisations to implement.
image: https://www.csis.com/hubfs/csis%20background%20dark.png
---

![](https://www.csis.com/hubfs/csis%20background%20dark.png)

# How to detect and defend against EDR bypass techniques

 Jan Kaastrup, CIO at CSIS, explains how to protect your systems from newly uncovered EDR vulnerabilities.

[#on-demand](https://www.csis.com/webinar-library/tag/on-demand)

<https://twitter.com/intent/tweet?url=https://www.csis.com/webinar-library/defend-edr-bypass-jan-kaastrup> <http://www.linkedin.com/shareArticle?mini=true&url=https://www.csis.com/webinar-library/defend-edr-bypass-jan-kaastrup> <https://www.facebook.com/sharer/sharer.php?u=https://www.csis.com/webinar-library/defend-edr-bypass-jan-kaastrup>

##### Expert Video: Responding to EDR Bypass

On a CSIS webinar broadcast in May 2026, Jan Kaastrup — CIO at CSIS Security Group — detailed two ways that attackers are seeking to overcome and disable Endpoint Detection and Response (EDR) systems. One technique targets web browsers, using malicious extensions to steal information. The other leverages vulnerable drivers to neutralise EDR tools entirely.

**In this video, Jan explains how organisations can defend against these threats.**

 

Duration: 6 minutes  
Audience: CISOs and heads of information security; SOC managers and security operations leaders; IT and security architects; endpoint, infrastructure and technology owners responsible for security outcomes.  
Date: May 2026

##### Jan’s recommended actions 

1. Disallow synchronisation of browser extensions
2. Maintain a whitelist of extensions that you trust
3. Block vulnerable drivers through enforced policies
4. Establish a proper incident response process
5. Run regular 'health checks' on your EDR devices
6. Use 'purple team' testing to simulate attacks
7. Integrate threat intelligence into your EDR solutions 

###### About CSIS

CSIS Security Group A/S is a leading European pure-play provider of tech-enabled cybersecurity and intelligence services. Operating 24/7, we deliver [Managed Detection & Response](https://www.csis.com/managed-detection-and-response/), [Incident Response](https://www.csis.com/emergency-response-consulting/), [Security Consulting](https://www.csis.com/consulting-assume-breach/) across all sectors, and provide a world-class [threat intelligence](https://www.secalliance.com/) capability through our SecAlliance brand. Accredited by organisations including CREST, we actively support global security initiatives to positively impact the cyber community. 

[ CSIS ](https://www.csis.com/webinar-library/author/csis)

 News

## Related articles

[![](https://www.csis.com/hubfs/CSIS_TM_Spring%202026_mockup%20with%20stefan_v4.webp)

 27.05.2026

###### Webinar Recording: Threat Matrix Report Spring 2026

 Real‑World Intelligence to Navigate the Cyber Threat Landscape Stefan Tanase, Cyber Intelligence Expert at CSIS,...

#on-demand

 1 minute read 

](https://www.csis.com/webinar-library/webinar-threat-matrix-report-spring-2026) [![](https://www.csis.com/hubfs/csis%20background%20dark.png)

 01.05.2026

###### Webinar recording: How to strengthen your endpoint detection and response (EDR)

 Topic: Ian Qvist and Jan Kaastrup explain how adversaries are seeking to bypass EDR. Duration: 1 hour 2 minutes. Date:...

#on-demand

 A super quick read. 

](https://www.csis.com/webinar-library/how-to-strengthen-endpoint-detection-and-response-edr)

<https://www.csis.com/>

 CSIS Security Group A/S is a member of the Allurity family. [ Learn More. ](https://allurity.com/)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "CSIS",
    "url" : "https://www.csis.com/webinar-library/author/csis"
  },
  "dateModified" : "2026-06-02T12:44:51.828Z",
  "datePublished" : "2026-06-02T12:31:55.000Z",
  "headline" : "How to detect and defend against EDR bypass techniques",
  "image" : [ "https://www.csis.com/hubfs/csis%20background%20dark.png" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.csis.com/webinar-library/defend-edr-bypass-jan-kaastrup",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.csis.com/hubfs/CSIS_PRI_LOGO_TURQUOISE_RGB_SVG.svg"
    },
    "name" : "CSIS Security Group A/S"
  }
}
```