# Sponsored: How AI is putting pressure on EDR

Page: https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-how-ai-is-putting-pressure-on-edr
Text version: https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-how-ai-is-putting-pressure-on-edr.md
Podcast: [Risky Bulletin](https://stenobird.com/podcast/risky-bulletin-5423259)
Published: 2026-07-26T22:39:34+00:00
Episode link: https://risky.biz/RBNEWSSI137/
Audio file: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWSSI137.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/risky-bulletin-5423259/episodes/sponsored-how-ai-is-putting-pressure-on-edr
Duration seconds: 1078

## Resource

In this sponsored interview James Wilson chats with Airlock Digital co-founders David Cottingham and Daniel Schell about how attackers are using LLMs to enumerate EDR detections. LLMs dramatically reduce the time and specialist labour needed to extract rulesets out of EDR products. What once might have taken months of manual reversing can now be accelerated by “burning tokens”. The takeaway is that defenders increasingly need to assume attackers have visibility into how their endpoint security products work.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/risky-bulletin-5423259/episodes/sponsored-how-ai-is-putting-pressure-on-edr/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-how-ai-is-putting-pressure-on-edr.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.