EDR detections (CrowdStrike, SentinelOne)
Detection retrieval from EDR products.
Status
Planned
Not built yet. Listed so you know what to expect.
Good to know
Host isolation and process tree in this module report "not yet implemented". CrowdStrike containment exists only as an opt-in response provider.
See it on your own alerts.
Book a walkthrough with the team. We will show the platform end to end, tell you what is production-ready and what is not, and discuss how it would sit next to your existing SIEM.