Microsoft's WESP aims to move EDR out of the Windows kernel
Insider builds already include wesp.sys, a mini-filter at altitude 329500, and user-mode API espclient.dll.
42
Product
wesp.sys
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 26, 2026
- Last mentioned5d ago
Timeline
1 articles · newest firstAppears with
- Microsoftvendor · 1
- Elastic Security Labsorganization · 1
- espclient.dllproduct · 1
- Windows Endpoint Security Platformproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.