Set up McAfee based EDR solution after another leading one failed to do its job !!!!
The task took me about a month to complete in terms of policy settings etc rather than deployment and has been in operation now for 3 years
Though I have mentioned the ATD appliance I could not get it and had to settle for all components other than the ATD appliance
Maybe alter the configuration layout based on the customer requirements and DEFINITELY get the ATD appliance