Comment on page

Can I use AIR with EDR/XDR Products?

Using AIR with EDR/XDR Products
The level of forensic information AIR provides is the biggest differentiator that separates it from the rest of the crowd. This fact makes AIR a perfect candidate for using it side-by-side with an EDR/XDR product.
Here are some EDR/XDR use-case examples:
  • Eliminating false positives by providing analysts with AIR reports,
  • Investigating pre-cursors,
  • Enriching an alert,
  • Responding to EDR/XDR alerts automatically.
If you use an EDR/XDR or EPP software along with Binalyze, check our exclusion/exception rules page.