I’ve been in security decades and am skeptical because Zero Trust and XDR almost seem intentionally confusing and skepticism inducing. But, I put my pre-conceptions aside and started from zero (ha) on a quest to study what Zero Trust is and isn’t, what XDR is, and how these two things can and can’t play together. This talk will reveal what I've learned from a year of digging into Zero Trust and XDR.