Endpoint Detection and Response

Endpoint Detection & Response (EDR) is currently ONLY available for Windows devices.

Endpoint Detection & Response (EDR) is an integrated threat management software from SentinelOne. Combining RMM with SentineIOne's endpoint protection, EDR enables Windows devices to self-defend and heal themselves by stopping processes, quarantine, fix, and roll back events to keep devices protected.

EDR uses process behavior to monitor multiple processes to recognize attacks as they develop and respond at machine speed. This is different to signature-based detection from traditional AV solutions, which monitors processes as they execute, and not the processes that can spawn from of it.

EDR provides forensic data to mitigate threats quickly, perform network isolation, and protect against newly discovered threats.

Key new integrated features within RMM include the ability to deploy EDR agents, configure profiles, and monitor devices from the dashboard.