Ville Vainikka
Henri Aalto
EDR is an excellent tool for getting local visibility to endpoints but linking events to a context to get a clearer picture requires something more, especially when the users are mobile.