Uses endpoint detection and response and extended detection and response platforms to investigate process trees, isolate systems, collect evidence, and coordinate response.
