EDR has an advanced investigative system that helps security analysts quickly investigate events, gather the required details, and report suspicious security events from an endpoint.
EDR uses artificial intelligence techniques to accelerate investigations and support decision-making to identify the root cause of a threat.
Use the following methods to investigate potential threats:
Once the in-depth investigation is complete for a case, you can respond to threats appropriately. For details, see Respond to threats.