EDR monitors system activity, such as running processes, network connections, and security alerts. It does not track personal browsing habits, private files, or non-work-related activity. When a security alert is triggered, EDR captures info on:
-
Applications running
-
Web sites visited
-
File activity, such as downloads
-
Processes running on the machine