Ok, When EDR first came out there were only a few vendors. Now the field is vast and almost every company has one. I've gone through most and here's what I found. You will also want an MDR to go with your EDR solution. You will want to work with the MDR to make sure they are…

Two things. 1. if the machine gets ransome ware it automatically gets taken off the network. 2. The ability to rollback an infected machine. Done it once and it works. Hope to never need to do it again.

The best part of AI products like Sentinel one is they are monitoring for this type of exploit. It's not just anti virus software. There is also a SOC that reacts when a machine is compromised. The hacker would use the exploit to get onto the machine this would alert the…