IT AI Skill

Endpoint Detection Response

Deploy and manage endpoint detection and response (EDR) solutions for advanced threat detection, investigation, and response on endpoints. Use when selecting EDR vendors, deploying EDR agents, configuring detection rules, managing alert triage, conducting endpoint investigations, performing live response actions, tuning detection policies, or measuring EDR effectiveness. Triggers on phrases like "EDR", "endpoint detection", "endpoint response", "endpoint security", "threat hunting", "endpoint forensics", "live response", "behavioral detection", "endpoint telemetry", "CrowdStrike", "SentinelOne", "Carbon Black", "Defender for Endpoint", "EDR tuning", "endpoint investigation".